RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v19]

Sean Mullan mullan at openjdk.org
Wed Feb 18 16:36:15 UTC 2026


On Wed, 18 Feb 2026 15:25:35 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 969:
>> 
>>> 967:      * This method only applies to TLSv1.3.
>>> 968:      *
>>> 969:      * @apiNote The peer must support compress_certificate extension and
>> 
>> Suggest a slight rewording: "The peer must support the compress_certificate extension and one of the compression algorithms in order for the certificate chain to be compressed."
>
> Sound good, thanks! Should we be even more specific and use `one of the compression algorithms supported by JSSE provider` wording?

The peer may not be a JDK implementation, so I think the above wording is more accurate.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2823284794


More information about the net-dev mailing list