RFR: 8372526: Add support for ZLIB TLS Certificate Compression [v6]

Artur Barashev abarashev at openjdk.org
Fri Jan 23 15:24:29 UTC 2026


On Fri, 23 Jan 2026 09:29:28 GMT, Jaikiran Pai <jpai at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with two additional commits since the last revision:
>> 
>>  - Add COMPRESSED_CERTIFICATE to the QUIC list of expected TLS messages
>>  - Add back the library directive
>
> src/java.base/share/classes/sun/security/ssl/CompressionAlgorithm.java line 98:
> 
>> 96: 
>> 97:         Map<Integer, Function<byte[], byte[]>> inflaters =
>> 98:                 new LinkedHashMap<>(config.certInflaters.size());
> 
> Hello Artur, is this intentionally using the constructor which takes a `initialCapacity` or was it meant to be the number of expected mappings? If it's the latter, then there's `LinkedHashMap.newLinkedHashMap()` method https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/LinkedHashMap.html#newLinkedHashMap(int) which takes the expected number of mappings.

That's basically the max possible size of that map. Currently it can be either 1 or 0. Thanks for pointing out this new method. I'll make a change so we avoid unnecessary reallocation.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28682#discussion_r2721665798


More information about the security-dev mailing list