RFR 8211018: Session Resumption without Server-Side State

sha.jiang at oracle.com sha.jiang at oracle.com
Tue Jun 4 12:25:22 UTC 2019


> ResumeChecksServer.java
> --------------------
> 57     static boolean clientCache = false, serverServerless = false;
> Should "serverServerless" be "serverStateless"?
>
> 86         if (st.compareToIgnoreCase("stateless") == 0) {
> 87             serverServerless = true;
> 88         }
> 89         st = System.getProperty("javax.net.ssl.sessionCacheClient", 
> "cache");
> 90         if (st.compareToIgnoreCase("cache") == 0) {
> 91             clientCache = true;
> 92         }
> Could method String::equalsIgnoreCase be used in the condition 
> statements?
In addition, the client side property is 
"jdk.tls.client.enableSessionTicketExtension".
And the new introduced properties should be bool values, and they should 
not have such "stateless" and "cache" values.

Best regards,
John Jiang



More information about the security-dev mailing list