Added reference to JDK-8212885

httpclient5/src/main/java/org/apache/hc/client5/http/ssl/TlsSessionValidator.java

@@ -109,6 +109,9 @@ void verifySession(
                 // _assume_ this is due to PSK (pre-shared key) TLS session resumption
                 // Resumed TLS sessions do not include server certificates.
 
+                // The issue is considered a bug in Java Security libraries and
+                // is being tracked as JDK-8212885
+
                 try {
                     final ProtocolVersion tls = TLS.parse(sslsession.getProtocol());
                     if (tls.greaterEquals(TLS.V_1_3.version)) {