CSR RFR: JDK-8300722: The unit of OCSP timeout should be changed from seconds to milliseconds

Sean Mullan sean.mullan at oracle.com
Fri Jan 20 21:09:27 UTC 2023


While you are doing this, I recommend we do the same for the CRL timeout 
properties to be consistent: com.sun.security.crl.timeout and 
com.sun.security.crl.readtimeout

--Sean

On 1/19/23 9:59 PM, Jamil Nimeh wrote:
> Hello all,
> 
> I put together a draft CSR for enhancing the
> com.sun.security.ocsp.timeout System property to allow it to be
> specified either in seconds (as it is currently done, no change to the
> format) or by appending "ms" (case-insensitive) to allow the numeric
> value to be interpreted in milliseconds.  I could use a review before
> proposing it.
> 
> https://bugs.openjdk.org/browse/JDK-8300722
> 
> Thanks,
> 
> --Jamil
> 



More information about the security-dev mailing list