On Wed, 12 Aug 2026 02:41:29 GMT, Guanqiang Han <[email protected]> wrote:
>> Please review this change. Thanks! >> >> **Description:** >> >> When an oversized CRL is fetched, the cached `crl` is cleared only when >> debugging is enabled, and `lastModified` is not reset. >> >> **Solution:** >> >> Always clear the cached `crl` and reset `lastModified` when an oversized CRL >> is discarded. >> >> --------- >> - [x] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Guanqiang Han has updated the pull request incrementally with one additional > commit since the last revision: > > Return early after CRL is cleared src/java.base/share/classes/sun/security/provider/certpath/URICertStore.java line 680: > 678: private static Collection<X509CRL> getMatchingCRLs > 679: (X509CRL crl, CRLSelector selector) { > 680: if (crl != null && (selector == null || selector.match(crl))) { Now you don't need to make this change anymore. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/32164#discussion_r3766329265
