RFR: 8328608: Multiple NewSessionTicket support for TLS [v2]

Anthony Scarpino ascarpino at openjdk.org
Thu Jun 27 18:34:26 UTC 2024


On Tue, 25 Jun 2024 09:14:12 GMT, Daniel Jeliński <djelinski at openjdk.org> wrote:

>> Anthony Scarpino has updated the pull request incrementally with three additional commits since the last revision:
>> 
>>  - remove frag issue
>>  - Comments, remove thread, set NST default to 1, allow 0
>>  - comment cleanup
>
> src/java.base/share/classes/sun/security/ssl/SSLSessionContextImpl.java line 93:
> 
>> 91:         if (server) {
>> 92:             sessionCache = Cache.newSoftMemoryCache(cacheLimit, timeout);
>> 93:             sessionHostPortCache = Cache.newSoftMemoryCache(cacheLimit, timeout);
> 
> preexisting, but I wonder if we could use nullCache here and in client's sessionCache

Let's deal with that outside of this RFE, but there are tests that use it and I'm pretty sure this has public API usage with SSLSessionContext.getSession(byte[])

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/19465#discussion_r1657634183



More information about the security-dev mailing list