--- old/src/jdk.security.jgss/share/classes/com/sun/security/sasl/gsskerb/GssKrb5Client.java	2020-07-15 12:40:18.000000000 +0300
+++ new/src/jdk.security.jgss/share/classes/com/sun/security/sasl/gsskerb/GssKrb5Client.java	2020-07-15 12:40:18.000000000 +0300
@@ -35,6 +35,7 @@
 import javax.security.auth.callback.CallbackHandler;
 
 // JGSS
+import sun.security.jgss.krb5.internal.TlsChannelBindingImpl;
 import org.ietf.jgss.*;
 
 /**
@@ -150,6 +151,14 @@
             }
             secCtx.requestMutualAuth(mutual);
 
+            if (props != null) {
+                // TLS Channel Binding
+                byte[] tlsCB = (byte[])props.get("jdk.internal.sasl.tlschannelbinding");
+                if (tlsCB != null) {
+                    secCtx.setChannelBinding(new TlsChannelBindingImpl(tlsCB));
+                }
+            }
+
             // Always specify potential need for integrity and confidentiality
             // Decision will be made during final handshake
             secCtx.requestConf(true);