[jdk17u-dev] RFR: 8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts [v3]

[Francisco Ferrari Bihurriet]

On Wed, 13 Nov 2024 18:30:32 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

>> Hello, I'd like to backport JDK-8179502 to JDK17u to improve the timeout adjustment for OCSP GET requests (which was missed in JDK-8179503).
>> 
>> The backport is almost clean except for the following:
>> - OCSP.java was merged manually because of JDK-8328638 and JDK-8329213 is already backported into 17u-dev
>> - copyright year in GetPropertyAction.java and URICertStore.java files are updated manually
>> - CRLReadTimeout.java test is updated manually because of the different notation of internal X509CRLImpl and CRLExtensions classes.
>> 
>> All new and related jtreg tests are passed
>
> Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Remove unused DEFAULT_READ_TIMEOUT constant

> /csr 8337407

@alexeybakhtin: looks like linking the right CSR ([JDK-8337407](https://bugs.openjdk.org/browse/JDK-8337407)) from the Oracle backport ([JDK-8338808](https://bugs.openjdk.org/browse/JDK-8338808)) did the trick.

Also, I think "parity with Oracle" is now a valid reason for maintainer approval, since jdk17u-dev is in the development phase of 17.0.15, the same version for which Oracle did the backport.

-------------

PR Comment: https://git.openjdk.org/jdk17u-dev/pull/2747#issuecomment-2577228908