RFR 8211018: Session Resumption without Server-Side State
sha.jiang at oracle.com
sha.jiang at oracle.com
Tue Jun 4 12:25:22 UTC 2019
> ResumeChecksServer.java
> --------------------
> 57 static boolean clientCache = false, serverServerless = false;
> Should "serverServerless" be "serverStateless"?
>
> 86 if (st.compareToIgnoreCase("stateless") == 0) {
> 87 serverServerless = true;
> 88 }
> 89 st = System.getProperty("javax.net.ssl.sessionCacheClient",
> "cache");
> 90 if (st.compareToIgnoreCase("cache") == 0) {
> 91 clientCache = true;
> 92 }
> Could method String::equalsIgnoreCase be used in the condition
> statements?
In addition, the client side property is
"jdk.tls.client.enableSessionTicketExtension".
And the new introduced properties should be bool values, and they should
not have such "stateless" and "cache" values.
Best regards,
John Jiang
More information about the security-dev
mailing list