RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v22]

Artur Barashev abarashev at openjdk.org
Fri Feb 27 20:19:23 UTC 2026


On Fri, 27 Feb 2026 03:13:32 GMT, Koushik Muthukrishnan Thirupattur <duke at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Bound the memory usage when decompressing CompressedCertificate
>
> src/java.base/share/classes/sun/security/ssl/CompressedCertificate.java line 165:
> 
>> 163:             byte[] compressedCertMsg;
>> 164: 
>> 165:             // Don't use cache if certificate_request_context is present.
> 
> NIT: Can we add more to this comment that explains what certMsg[0] represents and why it avoids caching?

Yes, I guess we can be a bit more verbose here, thanks!

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2866030358


More information about the net-dev mailing list