JDK-8347506 : Compatible OCSP readtimeout property with OCSP timeout
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 21,25
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2025-01-13
  • Updated: 2025-02-16
  • Resolved: 2025-01-24
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 21 JDK 24 JDK 25
21.0.8-oracleFixed 24.0.1Fixed 25 b08Fixed
Related Reports
Blocks :  
JDK-8337406 - Enhance OCSP, CRL and Certificate Fetch Timeouts
CSR :  
JDK-8347749 - Compatible OCSP readtimeout property with OCSP timeout
Relates :  
JDK-8337407 - Enhance OCSP, CRL and Certificate Fetch Timeouts
Relates :  
JDK-8345114 - Enhance OCSP, CRL and Certificate Fetch Timeouts
Relates :  
JDK-8179502 - Enhance OCSP, CRL and Certificate Fetch Timeouts
Sub Tasks
JDK-8347928 :  
Release Note: Compatible OCSP readtimeout Property with OCSP Timeout - Open
JDK-8347934 :  
Document Compatible OCSP readtimeout property with OCSP timeout - Open
Description
A new set of timeout values and enhancements to existing OCSP timeout values was first introduced in JDK-21 via JDK-8179502.  The backport to JDK-17 introduced a small change to the default setting for the `com.sun.security.ocsp.readtimeout` property.  This issue carries this default change for the property forward.  The change simply makes the default for the aforementioned property the same as whatever the value of the `com.sun.security.ocsp.timeout` System property is, rather than a 15000ms default in the original fix.

Refer to the CSRs:   https://bugs.openjdk.org/browse/JDK-8337407 and the withdrawn CSR https://bugs.openjdk.org/browse/JDK-8345114 (the withdrawn CSR has additional discussions in the comment section)
Comments
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk24u/pull/39 Date: 2025-01-28 17:31:25 +0000
28-01-2025
Changeset: f8e81d23 Branch: master Author: Jamil Nimeh <jnimeh@openjdk.org> Date: 2025-01-24 23:06:57 +0000 URL: https://git.openjdk.org/jdk/commit/f8e81d23393cbc04557e3975edd8898901dd6d26
24-01-2025
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/23118 Date: 2025-01-14 22:41:47 +0000
14-01-2025
We will wait for JDK-8337406 to be committed before committing any changes for this forward-port. JDK-8338808 already took care of similar functionality in 17.0.15.
14-01-2025