src/java.base/share/classes/sun/security/ssl/ServerHandshaker.java

@@ -792,10 +792,21 @@
                             peerSupportedSignAlgs);
                 }   // else, we will set the implicit peer supported signature
                     // algorithms in chooseCipherSuite()
             }
 
+            // set Certificate Authorities
+            if (protocolVersion.useTLS12PlusSpec()) {
+                final CertificateAuthoritiesExtension certificateAuthoritiesExtension =
+                        (CertificateAuthoritiesExtension)mesg.extensions.
+                        get(ExtensionType.EXT_CERTIFICATE_AUTHORITIES);
+                if (certificateAuthoritiesExtension != null) {
+                    session.setCertificateAuthorities(
+                            certificateAuthoritiesExtension.getCertificateAuthorities());
+                }
+            }
+
             // set the server name indication in the session
             List<SNIServerName> clientHelloSNI =
                     Collections.<SNIServerName>emptyList();
             if (clientHelloSNIExt != null) {
                 clientHelloSNI = clientHelloSNIExt.getServerNames();