RFR: 8359956: Support algorithm constraints and certificate checks in SunX509 key manager [v14]
Artur Barashev
abarashev at openjdk.org
Tue Jul 29 19:34:59 UTC 2025
On Tue, 29 Jul 2025 19:03:26 GMT, Sean Mullan <mullan at openjdk.org> wrote:
>> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>>
>> Address review comments
>
> src/java.base/share/classes/sun/security/ssl/X509KeyManagerImpl.java line 88:
>
>> 86: uidCounter = new AtomicLong();
>> 87: entryCacheMap = Collections.synchronizedMap
>> 88: (new SizedMap<>());
>
> You can remove `SizedMap` on lines 94-101. Did you see any reason why a `LinkedHashMap` was used? (I cannot, but this code has not changed in many releases, so we should be sure its ok).
Looks like `LinkedHashMap` was used so we can remove the eldest entry, the `SizedMap` is limited to the size of 10. Actually, I'll restore the original assignment of `entryCacheMap` to preserve the original cache design. I should have paid more attention to this change.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/25016#discussion_r2240765575
More information about the security-dev
mailing list