On Thu, 6 May 2021 11:57:48 GMT, Alexey Bakhtin <abakh...@openjdk.org> wrote:

> Unfortunately, simple pull() can not be used in this case. We have to check 
> if the session found in the cache can be rejoined with parameters received in 
> ClientHello and server context. Only rejoinable sessions should be removed 
> from the session cache.

For TLS 1.3, I think it may be safe to remove the session from the cache even 
if it is no rejoinable.

-------------

PR: https://git.openjdk.java.net/jdk/pull/3664

Reply via email to