JDK-8347928 : Release Note: Compatible OCSP readtimeout Property with OCSP Timeout
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 21.0.8-oracle,24.0.1,25
  • Priority: P4
  • Status: Resolved
  • Resolution: Delivered
  • Submitted: 2025-01-16
  • Updated: 2025-03-19
  • Resolved: 2025-03-19
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 21 JDK 24 JDK 25
21.0.8-oracleResolved 24.0.1Resolved 25Resolved
Related Reports
Relates :  
JDK-8308582 - Release Note: Enhanced OCSP, Certificate, and CRL Fetch Timeouts
Description
In JDK 21, an enhanced syntax for various timeout properties was released through JDK-8179502.  This included a new system property, `com.sun.security.ocsp.readtimeout`, which allows users to control the timeout while reading OCSP responses after a successful TCP connection has been established.

This changes the default posture of this property to be the value of the `com.sun.security.ocsp.timeout` system property from its original default of 15 seconds.  If the `com.sun.security.ocsp.timeout` system property is also not set, then its default 15 second timeout is propagated to the default for `com.sun.security.ocsp.readtimeout`.
Comments
[~mullan] I agree, I should have linked the original RN. I'll do that now. As to the 15 second default, the original RN indicates that 15 seconds is the default for the various properties already so I think we're covered there.
17-01-2025
The release note looks good.
17-01-2025