[
https://issues.apache.org/jira/browse/DIRMINA-937?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13609659#comment-13609659
]
Jeff MAURY edited comment on DIRMINA-937 at 3/21/13 11:23 PM:
--------------------------------------------------------------
Was able to reproduce on an Ubuntu 12.10 Desktop.
Almost working if using a MacOSX based curl: almost because no echo message is
generated, probably because the SSL nego fails
If using the Ubuntu based curl, hangs but according to the logs, not a MINA bug
as the SSL nego is managed by a JDK/JRE provided SSLEngine.
Will check to make sure using a debugging session
was (Author: jeffmaury):
Was able to reproduce on an Ubuntu 12.10 Desktop.
Almost work if using a MacOSX based curl: almost because no echo message is
generated, probably because the SSL nego fails
If using the Ubuntu based curl, hangs but according to the logs, no a MINA bug
as the SSL nego is managed by a JDK/JRE provided SSLEngine.
Will check to make sure using a debugging session
> sslfilter hangs with openjdk works with oracle?
> -----------------------------------------------
>
> Key: DIRMINA-937
> URL: https://issues.apache.org/jira/browse/DIRMINA-937
> Project: MINA
> Issue Type: Bug
> Components: Filter
> Affects Versions: 2.0.7
> Environment: OpenJDK Runtime Environment (IcedTea6 1.12.1)
> (6b27-1.12.1-2ubuntu0.12.04.2)
> OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
> Reporter: Andrew C
>
> Still gathering information, however ...
> I've a server that's using SslFilter. When I test a connection using curl
> (two different versions; curl -k --trace - https://localhost:4321) it hangs:
> - curl sends the client hello
> - never gets any response
> looking at an extract of the logs I see:
> [read] MD5 and SHA1 hashes: len = 235
> 0000: 01 00 00 E7 03 02 51 35 14 CC 56 9F 1B 4E B0 80 ......Q5..V..N..
> ...
> 00E0: 00 0F 00 10 00 11 00 0F 00 01 01 ...........
> matching alias: mykey
> [2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG
> org.apache.mina.filter.ssl.SslHandler - Session Server[2](ssl...) processing
> the NEED_UNWRAP state
> [2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG
> org.apache.mina.filter.ssl.SslFilter - Session Server[2](ssl...): Processing
> the SSL Data
> i.e., SSLEngine's indicated that it is expecting more data from curl.
> If I switch to oracle's jvm, things work - that is the NEED_UNWRAP doesn't
> appear and SSLEngine starts sending data back to the curl client:
> ...
> 00E0: 00 0F 00 10 00 11 00 0F 00 01 01 ...........
> matching alias: mykey
> %% Created: [Session-1, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA]
> *** ServerHello, TLSv1
> ...
> any one else seen this?
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
