archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-28 15:24:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8227551: Session Resumption without Server-Side State off by default

Browse source 
Reviewed-by: xuelei, jnimeh, jjiang
This commit is contained in:
Anthony Scarpino 2019-07-17 12:31:21 -07:00
parent 6f3bb94427
commit bc7a8842a3
2 changed files with 17 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

11
open.iml Normal file
View file

@ -0,0 +1,11 @@
<?xml version="1.0" encoding="UTF-8"?>
<module type="JAVA_MODULE" version="4">
<component name="NewModuleRootManager" inherit-compiler-output="true">
<exclude-output />
<content url="file://$MODULE_DIR$">
<sourceFolder url="file://$MODULE_DIR$/src/java.base/share/classes" isTestSource="false" />
</content>
<orderEntry type="sourceFolder" forTests="false" />
<orderEntry type="inheritedJdk" />
</component>
</module>

13
src/java.base/share/classes/sun/security/ssl/SSLSessionContextImpl.java
View file

@ -69,8 +69,8 @@ final class SSLSessionContextImpl implements SSLSessionContext {
private int cacheLimit; // the max cache size private int cacheLimit; // the max cache size
private int timeout; // timeout in seconds private int timeout; // timeout in seconds
// Does this context support stateless session (RFC 5077) // Default setting for stateless session resumption support (RFC 5077)
private boolean statelessSession = true; private boolean statelessSession = false;
// package private // package private
SSLSessionContextImpl(boolean server) { SSLSessionContextImpl(boolean server) {
@ -234,15 +234,14 @@ final class SSLSessionContextImpl implements SSLSessionContext {
// Property for Session Cache state // Property for Session Cache state
if (server) { if (server) {
st = GetPropertyAction.privilegedGetProperty( st = GetPropertyAction.privilegedGetProperty(
"jdk.tls.server.enableSessionTicketExtension", "true"); "jdk.tls.server.enableSessionTicketExtension", "false");
} else { } else {
st = GetPropertyAction.privilegedGetProperty( st = GetPropertyAction.privilegedGetProperty(
"jdk.tls.client.enableSessionTicketExtension", "true"); "jdk.tls.client.enableSessionTicketExtension", "false");
}
if (st.compareToIgnoreCase("false") == 0) {
statelessSession = false;
} }
statelessSession = Boolean.parseBoolean(st);
// Property for Session Ticket Timeout. The value can be changed // Property for Session Ticket Timeout. The value can be changed
// by SSLSessionContext.setSessionTimeout(int) // by SSLSessionContext.setSessionTimeout(int)
String s = GetPropertyAction.privilegedGetProperty( String s = GetPropertyAction.privilegedGetProperty(