src/java.base/share/classes/sun/security/ssl/SSLSocketImpl.java

@@ -214,10 +214,14 @@
     private boolean             noSniExtension = false;
 
     // Is the sniMatchers set to empty with SSLParameters.setSNIMatchers()?
     private boolean             noSniMatcher = false;
 
+    // Is the use of Certificate Authorities TLS extension enabled?
+    // Use variable getter method to query the value.
+    private boolean useCertificateAuthorities = false;
+
     // Configured application protocol values
     String[] applicationProtocols = new String[0];
 
     // Negotiated application protocol value.
     //

@@ -2577,10 +2581,12 @@
 
         // the super implementation does not handle the following parameters
         params.setEndpointIdentificationAlgorithm(identificationProtocol);
         params.setAlgorithmConstraints(algorithmConstraints);
 
+        params.setUseCertificateAuthorities(useCertificateAuthorities);
+
         if (sniMatchers.isEmpty() && !noSniMatcher) {
             // 'null' indicates none has been set
             params.setSNIMatchers(null);
         } else {
             params.setSNIMatchers(sniMatchers);

@@ -2622,10 +2628,12 @@
         } else {
             // use the implicit maximum packet size.
             maximumPacketSize = outputRecord.getMaxPacketSize();
         }
 
+        useCertificateAuthorities = params.getUseCertificateAuthorities();
+
         List<SNIServerName> sniNames = params.getServerNames();
         if (sniNames != null) {
             noSniExtension = sniNames.isEmpty();
             serverNames = sniNames;
         }