Code Review Request, JDK-8213577, Update the default SSL session cache size to 20480

Sean Mullan sean.mullan at oracle.com
Thu Nov 15 19:55:00 UTC 2018


This is a good opportunity to document the 
javax.net.ssl.sessionCacheSize system property in the SSLSessionContext 
API (and use the new @systemProperty tag) in an @implNote, for example:

     /**
      * Returns the size of the cache used for storing
      * <code>SSLSession</code> objects grouped under this
      * <code>SSLSessionContext</code>.
      *
      * @implNote The JDK implementation returns the cache size as set by
      * the {@code setSessionCacheSize method}, or if not set, the value
      * of the {@systemProperty javax.net.ssl.sessionCacheSize} system
      * property. If neither is set, it returns a default value of 20480.
      *
      * @return size of the session cache; zero means there is no size 
limit.
      * @see #setSessionCacheSize
      */
     public int getSessionCacheSize();

On 11/14/18 11:59 AM, Xuelei Fan wrote:
> Hi,
> 
> Please review this simple update:
>      http://cr.openjdk.java.net/~xuelei/8210985/webrev.00/
> 
> The default value for the maximum number of entries in the SSL session 
> cache (SSLSessionContext.getSessionCacheSize()) is infinite now.  In the 
> request, the default value is updated to 20480 for performance 
> consideration.
> 
> For the detailed behavior update, please refer to CSR:
>      https://bugs.openjdk.java.net/browse/JDK-8213577
> 
> Thanks,
> Xuelei


More information about the security-dev mailing list