RFR: 8044609: javax.net.debug options not working and documented as expected [v9]

Bradford Wetmore wetmore at openjdk.org
Tue Nov 19 21:15:08 UTC 2024


On Tue, 19 Nov 2024 12:15:39 GMT, Sean Coffey <coffeys at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/ssl/SSLLogger.java line 103:
>> 
>>> 101:         System.err.println("\tdefaultctx   print default SSL initialization");
>>> 102:         System.err.println("\tsslctx       print SSLContext tracing");
>>> 103:         System.err.println("\tsessioncache print session cache tracing");
>> 
>> Did the `sessioncache` category also get pulled?  It used to be used whenever we added/retrieved/deleted(expired) a `SSLSession` to/from the cache.  (i.e. when a handshake completed, or we are handshaking and we retrieved a session from the cache to potentially resume.)
>> 
>> I don't see any usages of it now.  If so, this is a defect and needs a bug to track.
>
> can't see it used anywhere. I went back to an old (2007) copy of SSLSessionImpl and there it used the "ssl" category.
> 
> `private static final Debug debug = Debug.getInstance("ssl");`
> 
> No debug statements were implemented in the newer TLSv1.3 stack (to date)

Can we get that added back, or maybe added to a follow-on bug?  That seemed useful.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/18764#discussion_r1849060036


More information about the security-dev mailing list