JDK-8300812 : Configurable connect and read timeouts for Certificates
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 17
  • Priority: P4
  • Status: New
  • Resolution: Unresolved
  • OS: generic
  • CPU: generic
  • Submitted: 2023-01-20
  • Updated: 2023-01-21
Description
A DESCRIPTION OF THE PROBLEM :
Provide a system properties for configuring the connect and read timeouts for Certificates.

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
There is currently no connect and read timeouts when downloading Certificates from a URL. For security and performance reasons, there should be a default timeout and a way for users to configure the timeout.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Add a system property named "com.sun.security.certificate.timeout" with a default value of 15 seconds for connection timeout.
Add a system property named "com.sun.security.certificate.readtimeout" with a default value of 15 seconds for read timeout.
ACTUAL -
There is currently no connect and read timeouts when downloading Certificates from a URL.

FREQUENCY : rarely



Comments
It looks an enhancement. Moved to JDK for further evaluations.
21-01-2023