On Thu, 29 Jan 2026 15:32:50 GMT, Daniel Fuchs <[email protected]> wrote:

> The issue here is that `HttpURLConnection` is automatically disconnected 
> (`HttpClient` is set to `null`, `connected` is set to `false`) when a 
> response with no response body bytes is received. This happens before a fake 
> empty body input stream is returned to the user. That behaviour also occurs 
> with any method for which `content-length: 0` is returned (GET, POST, custom, 
> anything), and with any status code (204, 304) for which there is no body.
> 
> In this case, the proposed fix is to store the `SSLSession` in the 
> `AbstractDelegateHttpsURLConnection` subclass until such a time where 
> `disconnect()` is explicitely closed. Information pertaining to SSL, such as 
> server certificates, can be extracted from the saved `SSLSession`.

I am not an official reviewer, but changes look good to me.
The "snapshot" build passes the reproducer posted with the issue.

-------------

Marked as reviewed by [email protected] (no known OpenJDK username).

PR Review: https://git.openjdk.org/jdk/pull/29489#pullrequestreview-3728939814

Reply via email to