RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v3]

Artur Barashev abarashev at openjdk.org
Thu Jan 22 21:30:10 UTC 2026


On Thu, 22 Jan 2026 12:33:59 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> Artur Barashev has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 26 commits:
>> 
>>  - Improve cache key checksum
>>  - Merge branch 'master' into JDK-8372526
>>  - Cache compressed local certificates
>>  - Merge branch 'master' into JDK-8372526
>>    
>>    # Conflicts:
>>    #	src/java.base/share/classes/sun/security/ssl/SSLConfiguration.java
>>  - Correct log message. Reformat file.
>>  - Update unit test
>>  - Merge branch 'master' into JDK-8372526
>>  - Add DefaultCertCompression unit test
>>  - Update copyright year and bug number plus some small changes
>>  - Revert SSLLogger changes
>>  - ... and 16 more: https://git.openjdk.org/jdk/compare/aaca0a2c...c859eb39
>
> test/jdk/javax/net/ssl/HttpsURLConnection/HttpsCompressedCert.java line 58:
> 
>> 56:                         new URI("https://www.google.com/"))
>> 57:                 .GET()
>> 58:                 .build();
> 
> Maybe this should be a manual test since it's accessing a host on the public internet.
> How difficult would it be to have a test that uses the jdk.net HttpServer instead?

I made it manual, thanks! I'll work on `HttpServer` test.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2718696868


More information about the security-dev mailing list