8130864: Better server identity handling
authorxuelei
Mon, 13 Jul 2015 13:37:22 +0000
changeset 33293 14dcba137e73
parent 33292 4d2290a6ce1f
child 33294 1e3fd79b0265
8130864: Better server identity handling Reviewed-by: jnimeh, asmotrak, ahgross
jdk/src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java
--- a/jdk/src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java	Thu Jul 09 13:23:03 2015 +0100
+++ b/jdk/src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java	Mon Jul 13 13:37:22 2015 +0000
@@ -672,6 +672,9 @@
                 }
             } else {
                 // we wanted to resume, but the server refused
+                //
+                // Invalidate the session in case of reusing next time.
+                session.invalidate();
                 session = null;
                 if (!enableNewSession) {
                     throw new SSLException("New session creation is disabled");