When org.bouncycastle.jsse.client.earlyKeyShares includes X25519MLKEM768 and the connection negotiates TLS 1.2 (e.g. because the server is TLS 1.2-only). a warning is logged on every connection:
WARNING: Candidate early key share not an enabled named group: X25519MLKEM768
Should this be reduced to DEBUG (or suppressed entirely) when the group is only inactive due to the negotiated protocol version?
When
org.bouncycastle.jsse.client.earlyKeySharesincludesX25519MLKEM768and the connection negotiates TLS 1.2 (e.g. because the server is TLS 1.2-only). a warning is logged on every connection:WARNING: Candidate early key share not an enabled named group: X25519MLKEM768Should this be reduced to
DEBUG(or suppressed entirely) when the group is only inactive due to the negotiated protocol version?