On Wed, 20 Jan 2021 19:37:10 GMT, Hai-May Chao <hc...@openjdk.org> wrote:
>> This enhancement adds support for the nonce extension in OCSP request >> extensions by system property jdk.security.certpath.ocspNonce. >> >> Please review the CSR at: >> https://bugs.openjdk.java.net/browse/JDK-8257766 > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Add nonce to the list of extensions Marked as reviewed by mullan (Reviewer). src/java.base/share/classes/sun/security/provider/certpath/RevocationChecker.java line 762: > 760: } > 761: > 762: tmpExtensions.add(nonceExt); If you only need the nonce, you could use List.of and save a little bit of memory, ex: if (ocspExtensions.size() > 0) { tmpExtensions = new ArrayList<Extension>(ocspExtensions); tmpExtensions.add(nonceExt); } else { tmpExtensions = List.of(nonceExt); } ------------- PR: https://git.openjdk.java.net/jdk/pull/2039
