RFR: 8272875: Change the default key manager to PKIX [v2]

Thu Apr 24 19:05:05 UTC 2025

On Wed, 23 Apr 2025 23:28:29 GMT, Anthony Scarpino <ascarpino at openjdk.org> wrote:

> Do we understand why this is so much slower? I wouldn't have thought extra checking would cause this big of a performance hit.

Yes, it looks that way. `SunX509` KeyManager is really simple, so adding certificate validation can decrease the performance significantly. The discussion of #17956 contains an extensive performance analyses.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/24756#issuecomment-2828599943