RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v19]

Artur Barashev abarashev at openjdk.org
Wed Feb 18 15:28:12 UTC 2026


On Wed, 11 Feb 2026 21:34:34 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Remove Google-specific manual test because google.com seem to support only brotli compression
>
> src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 969:
> 
>> 967:      * This method only applies to TLSv1.3.
>> 968:      *
>> 969:      * @apiNote The peer must support compress_certificate extension and
> 
> Suggest a slight rewording: "The peer must support the compress_certificate extension and one of the compression algorithms in order for the certificate chain to be compressed."

Sound good, thanks! Should we be even more specific and use `one of the compression algorithms supported by JSSE provider` wording?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2822898886


More information about the net-dev mailing list