RFR: 8349910: Implement JEP 517: HTTP/3 for the HTTP Client API [v13]

[Artur Barashev]

On Wed, 20 Aug 2025 13:55:38 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> Hi,
>> 
>> Please find here a PR for the implementation of [JEP 517: HTTP/3 for the HTTP Client API](https://openjdk.org/jeps/517).
>> 
>> The CSR can be viewed at [JDK-8350588: Implement JEP 517: HTTP/3 for the HTTP Client API](https://bugs.openjdk.org/browse/JDK-8350588)
>> 
>> This JEP proposes to enhance the HttpClient implementation to support HTTP/3.
>> It adds a non-exposed / non-exported internal implementation of the QUIC protocol based on DatagramChannel and the SunJSSE SSLContext provider.
>
> Daniel Fuchs has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 616 commits:
> 
>  - merge latest changes from master branch
>  - merge latest http3 changes
>  - Hide internal classes
>  - quic: Do not decrypt 1-RTT packets until the TLS handshake is complete
>  - quic: remove unused fields
>  - Make final fields static
>  - Remove unused variable
>  - merge latest changes from master branch
>  - http3: update summary in H3SimpleTest.java
>  - http3: review feedback - use copy() instead of thenApply(Function.identity())
>  - ... and 606 more: https://git.openjdk.org/jdk/compare/908f3c96...e0aa68c9

src/java.base/share/classes/sun/security/ssl/X509Authentication.java line 229:

> 227:             // just call the functionally limited
> 228:             // javax.net.ssl.X509KeyManager.chooseClientAlias(...)
> 229:             if (km instanceof X509KeyManagerImpl xkm) {

We no longer need a special case for `X509KeyManagerImpl` as `SunX509KeyManagerImpl` supports algorithm constraints now. See #25016 for details.

src/java.base/share/classes/sun/security/ssl/X509Authentication.java line 322:

> 320:                 // and just call the functionally limited
> 321:                 // javax.net.ssl.X509KeyManager.chooseServerAlias(...)
> 322:                 if (km instanceof X509KeyManagerImpl xkm) {

Same as above, `SunX509KeyManagerImp`l supports algorithm constraints now. See https://github.com/openjdk/jdk/pull/25016 for details.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24751#discussion_r2288503211
PR Review Comment: https://git.openjdk.org/jdk/pull/24751#discussion_r2288505103