SSL-related tests fail on JDK 11

[mike10004]

Tests that make SSL connections fail due to errors when building with JDK 11. Specifically, these tests exhibit errors:

testConnectNoAuthSSLServer(sockslib.test.client.TestSSLSocks5): Connection reset
testConnectSSLAuthServer(sockslib.test.client.TestSSLSocks5): Connection reset
testSSLConnect(sockslib.test.quickstart.TestSocks5Server): Connection reset
testSSL2Connect(sockslib.test.quickstart.TestSocks5Server): Connection reset
tesSslUDP(sockslib.test.quickstart.TestSocks5Server): Received fatal alert: handshake_failure

This can be reproduced by building in containers. The tests pass when, in a local cloned repository directory, you execute

$ docker run -it --rm -v $PWD:/usr/src/sockslib -w /usr/src/sockslib maven:3.6-jdk-8 mvn clean install

...which builds with JDK 8, but they fail if you execute

$ docker run -it --rm -v $PWD:/usr/src/sockslib -w /usr/src/sockslib maven:3.6-jdk-11 mvn clean install

...which builds with JDK 11.

Partial build log showing the failures on JDK 11 is attached:
sockslib-build-jdk-11.log

Java version details are:

openjdk version "11.0.4" 2019-07-16
OpenJDK Runtime Environment 18.9 (build 11.0.4+11)
OpenJDK 64-Bit Server VM 18.9 (build 11.0.4+11, mixed mode)

A workaround is to set the system property jdk.tls.client.protocols=TLSv1.2 as mentioned here. (This was revealed to me in a comment on this question.) That is, change the Maven command to

$ mvn clean install -Djdk.tls.client.protocols=TLSv1.2

However, because it seems that JDK 11 is defaulting to TLSv1.3, some change to the SSLConfiguration.getSSLSocketFactory() method is probably approprate. I do not know what that change is, though.