RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v19]

Sean Mullan mullan at openjdk.org
Wed Feb 18 13:38:43 UTC 2026


On Wed, 11 Feb 2026 15:30:47 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> Implement certificate compression in TLS 1.3 using internally supported ZLIB compression algorithm. See RFC 8879 for more details:
>> https://datatracker.ietf.org/doc/html/rfc8879
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Remove Google-specific manual test because google.com seem to support only brotli compression

src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 969:

> 967:      * This method only applies to TLSv1.3.
> 968:      *
> 969:      * @apiNote The peer must support compress_certificate extension and

Suggest a slight rewording: "The peer must support the compress_certificate extension and one of the compression algorithms in order for the certificate chain to be compressed."

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2795638544


More information about the net-dev mailing list