[jdk21u-dev] RFR: 8328608: Multiple NewSessionTicket support for TLS

[Martin Doerr]

On Sun, 18 Jan 2026 11:55:45 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

> I backport this for parity with 21.0.11-oracle.
> 
> src/java.base/share/classes/sun/security/ssl/PreSharedKeyExtension.java
> Copyright.
> 
> src/java.base/share/classes/sun/security/ssl/SSLConfiguration.java
> Copyright and whitespace.
> 
> src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java
> Copyright and whitespace.
> 
> Further resolved around line 505 because later change "https://bugs.openjdk.org/browse/JDK-8350830: Values converted incorrectly when reading TLS session tickets"
> was already backported.
> 
> One hunk in SSLConfiguration.java was applied at a wrong location. I moved it to the right place. See extra commit.
> 
> MultiNSTNoSessionCreation.java needs some test helper coding that was added in 22 by 
> https://bugs.openjdk.org/browse/JDK-8318485: Narrow klass shift should be zero if encoding range extends to 0x1_0000_0000

Ok, [JDK-8311596](https://bugs.openjdk.org/browse/JDK-8311596) is not in 21u and [JDK-8350830](https://bugs.openjdk.org/browse/JDK-8350830) has already been backported (in different order). The addition to OutputAnalyzer makes sense. LGTM.

-------------

Marked as reviewed by mdoerr (Reviewer).

PR Review: https://git.openjdk.org/jdk21u-dev/pull/2548#pullrequestreview-3681513358