> Hi > > This change is to improve TLS 1.3 session resumption by allowing a TLS server > to send more than one resumption ticket per connection and clients to store > more. Resumption is a quick way to use an existing TLS session to establish > another session by avoiding the long TLS full handshake process. In TLS 1.2 > and below, clients can repeatedly resume a session by using the session ID > from an established connection. In TLS 1.3, a one-time "resumption ticket" > is sent by the server after the TLS connection has been established. The > server may send multiple resumption tickets to help clients that rapidly > resume connections. If the client does not have another resumption ticket, > it must go through the full TLS handshake again. The current implementation > in JDK 23 and below, only sends and store one resumption ticket. > > The number of resumption tickets a server can send should be configurable by > the application developer or administrator. [RFC > 8446](https://www.rfc-editor.org/rfc/rfc8446) does not specify a default > value. A system property called `jdk.tls.server.newSessionTicketCount` > allows the user to change the number of resumption tickets sent by the > server. If this property is not set or given an invalid value, the default > value of 3 is used. Further details are in the CSR. > > A large portion of the changeset is on the client side by changing the > caching system used by TLS. It creates a new `CacheEntry<>` type called > `QueueCacheEntry<>` that will store multiple values for a Map entry.
Anthony Scarpino has updated the pull request incrementally with two additional commits since the last revision: - revert to synchronized - code review changes ------------- Changes: - all: https://git.openjdk.org/jdk/pull/19465/files - new: https://git.openjdk.org/jdk/pull/19465/files/35bfe799..c858da27 Webrevs: - full: https://webrevs.openjdk.org/?repo=jdk&pr=19465&range=03 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=19465&range=02-03 Stats: 66 lines in 3 files changed: 1 ins; 49 del; 16 mod Patch: https://git.openjdk.org/jdk/pull/19465.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/19465/head:pull/19465 PR: https://git.openjdk.org/jdk/pull/19465