RFR: 8191808: Configurable read timeout for CRLs

Xuelei Fan xuelei.fan at oracle.com
Tue May 7 15:28:02 UTC 2019


What do you think if com.sun.security.crl.readtimeout is not set, 
CRL_READ_TIMEOUT is set as the same value as CRL_CONNECT_TIMEOUT?

Otherwise, looks fine to me.

Xuelei

On 5/7/2019 7:28 AM, Sean Mullan wrote:
> Please review this change to add a system property for configuring the 
> read timeout when downloading CRLs with a default value of 15 seconds. 
> Currently there is no timeout so downloads of large CRLs can block for a 
> long time or indefinitely. Current workaround is to use the 
> sun.net.client.defaultReadTimeout system property but that affects all 
> connections.
> 
> bug: https://bugs.openjdk.java.net/browse/JDK-8191808
> CSR: https://bugs.openjdk.java.net/browse/JDK-8223310
> webrev: http://cr.openjdk.java.net/~mullan/webrevs/8191808/webrev.00/
> 
> Thanks,
> Sean



More information about the security-dev mailing list