On Wed, 12 Aug 2026 02:41:29 GMT, Guanqiang Han <[email protected]> wrote:

>> Please review this change. Thanks!
>> 
>> **Description:**
>> 
>> When an oversized CRL is fetched, the cached `crl` is cleared only when 
>> debugging is enabled, and `lastModified` is not reset.
>> 
>> **Solution:**
>> 
>> Always clear the cached `crl` and reset `lastModified` when an oversized CRL 
>> is discarded.
>> 
>> ---------
>> - [x] I confirm that I make this contribution in accordance with the 
>> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai).
>
> Guanqiang Han has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   Return early after CRL is cleared

src/java.base/share/classes/sun/security/provider/certpath/URICertStore.java 
line 680:

> 678:     private static Collection<X509CRL> getMatchingCRLs
> 679:         (X509CRL crl, CRLSelector selector) {
> 680:         if (crl != null && (selector == null || selector.match(crl))) {

Now you don't need to make this change anymore.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/32164#discussion_r3766329265

Reply via email to