RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v19]
Sean Mullan
mullan at openjdk.org
Wed Feb 18 13:38:43 UTC 2026
On Wed, 11 Feb 2026 15:30:47 GMT, Artur Barashev <abarashev at openjdk.org> wrote:
>> Implement certificate compression in TLS 1.3 using internally supported ZLIB compression algorithm. See RFC 8879 for more details:
>> https://datatracker.ietf.org/doc/html/rfc8879
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>
> Remove Google-specific manual test because google.com seem to support only brotli compression
src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 969:
> 967: * This method only applies to TLSv1.3.
> 968: *
> 969: * @apiNote The peer must support compress_certificate extension and
Suggest a slight rewording: "The peer must support the compress_certificate extension and one of the compression algorithms in order for the certificate chain to be compressed."
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2795638544
More information about the net-dev
mailing list