Save a few cycles

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1076178 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/java/org/apache/coyote/http11/Http11NioProcessor.java b/java/org/apache/coyote/http11/Http11NioProcessor.java
index 6f6145c..c00300d 100644 (file)
--- a/java/org/apache/coyote/http11/Http11NioProcessor.java
+++ b/java/org/apache/coyote/http11/Http11NioProcessor.java
@@ -643,7 +643,9 @@ public class Http11NioProcessor extends AbstractHttp11Processor {
                 }
 
                 try {
-                    Object sslO = sslSupport.getPeerCertificateChain(true);
+                    // use force=false since re-negotiation is handled above
+                    // (and it is a NO-OP for NIO anyway)
+                    Object sslO = sslSupport.getPeerCertificateChain(false);
                     if( sslO != null) {
                         request.setAttribute
                             (SSLSupport.CERTIFICATE_KEY, sslO);