RFR: 8273042: TLS Certificate Compression

[Artur Barashev]

On Wed, 23 Feb 2022 20:15:24 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:

> Hi,
> 
> Please review the implementation of RFC 8879, TLS Certificate Compression, in JDK.  The TLS Certificate Compression standard is an essential part for QUIC connections and performance improvement for TLS connections.  More details, please refer to the [JEP](https://bugs.openjdk.java.net/browse/JDK-8281710) proposal.
> 
> The JEP was submitted, and it may take time for the final approval.  But let me know you ideas and concerns about the proposal and implementation.
> 
> JEP: https://bugs.openjdk.java.net/browse/JDK-8281710

test/jdk/javax/net/ssl/HttpsURLConnection/HttpsCompressedCert.java line 64:

> 62:     public static void main(String[] args) throws Exception {
> 63:         SSLParameters sslParameters = new SSLParameters();
> 64:         sslParameters.setCertificateInflaters(Map.of("brotli", certInflater));

Why `brotli` compression is being requested here when JDK doesn't support it? Looks like Google doesn't send a compressed certificate back, that's why this test works, the supplied `certInflater` function is using ZLIB.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/7599#discussion_r2136560698