Search code examples
javassljsse

Java 1.6 JSSE default SSL session timeout?

What is the default SSL session timeout used by Java 1.6 JSSE?

SSLSessionContext has methods for getting and setting it, but neither it or the JSSE Reference Guide mention any default value.

Solution

  • SSLSessionContext itself can't have a default value, because it's just an interface. You need to look at the implementation to find the default value.

    http://www.docjar.com/html/api/sun/security/ssl/SSLSessionContextImpl.java.html indicates that it is 24 hours for SSLSessionContextImpl.