Uwe,
Is there a way to capture the output when running with
-Djavax.net.debug=all ? That would be useful to get a bit more detail on
what is going on.
There are several threads on security-dev right now discussing issues
around TLS 1.3 and the handshake. Simone Bordet from the Jetty team is
involved in one or two threads as there seems to be some interop issues
that are being discussed. It's possible that you are running into
something in this area but I can't say for sure.
-Alan
On 13/07/2018 22:37, Uwe Schindler wrote:
Hi Alan, hi Rory,
Thanks for the update. The NPE no longer happens with JDK 11 ea build 22, but -
unfortunately - it now breaks a bit later, also inside Apache Http Client when
calling the SSLSocketImpl:
[junit4] 2> Caused by: javax.net.ssl.SSLHandshakeException: Remote host
terminated the handshake
[junit4] 2> at
sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1121) ~[?:?]
[junit4] 2> at
sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:885) ~[?:?]
[junit4] 2> at
sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:810) ~[?:?]
[junit4] 2> at
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:383) ~[?:?]
[junit4] 2> at
org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:396)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:355)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:359)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:381)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:237)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:185)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:111)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56)
~[httpclient-4.5.3.jar:4.5.3]
[junit4] 2> at
org.apache.solr.client.solrj.impl.HttpSolrClient.executeMethod(HttpSolrClient.java:542)
~[java/:?]
[junit4] 2> ... 12 more
The number of tests failing is therefore the same (it varies a bit, because the
communication to solr is done with HTTPS randomly).
I think this is a new bug relating to the TLS 1.3 integration. A bit of
background: This is Apache's HTTPClient talking to a Jetty 9.3 server on
127.0.0.1.
Once I have some time on the weekend or next week, I will setup a simple Jetty
webserver and will use Apache's HttpClient to talk to it.
Uwe
-----Original Message-----
From: Uwe Schindler <[email protected]>
Sent: Friday, July 13, 2018 11:59 AM
To: 'Alan Bateman' <[email protected]>; 'Rory O'Donnell'
<[email protected]>
Subject: RE: FW: [JENKINS-EA] Lucene-Solr-7.x-Linux (64bit/jdk-11-ea+21) -
Build # 2276 - Unstable!
Hi Alan,
I installed this version on Linux and Windows Jenkins. First build is running!
https://jenkins.thetaphi.de/job/Lucene-Solr-7.x-Linux/2315/
Uwe
-----Original Message-----
From: Alan Bateman <[email protected]>
Sent: Friday, July 13, 2018 8:43 AM
To: Uwe Schindler <[email protected]>; 'Rory O'Donnell'
<[email protected]>
Subject: Re: FW: [JENKINS-EA] Lucene-Solr-7.x-Linux (64bit/jdk-11-ea+21) -
Build # 2276 - Unstable!
jdk-11+22 has been published and includes this fix so I hope you will be
able to test Lucene with this build.
-Alan
On 07/07/2018 14:26, Alan Bateman wrote:
There was a regression in jdk-11+20 after the TLS 1.3 integration. The
bug is JDK-8206355 [1] and the fix is in jdk/jdk11 so should be next
week's build (jdk+11+22).
-Alan
[1] https://bugs.openjdk.java.net/browse/JDK-8206355
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
