[
https://issues.apache.org/jira/browse/DIRMINA-937?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jeff MAURY updated DIRMINA-937:
-------------------------------
Attachment: TestJDK.java
The code is dirty but I you run it with the same debug flags as the MINA code,
you will see that the alert is generated in the unwrap call that follows the
delegated task run.
Seems to me that when a delegated task generated an exception, it is cached
into the SSLEngine and the corresponding alert is generated when the unwrap
call is done.
I am working on a more simple test case (no IcedTea restricted) using
incompatible cipher suites between the client and the server.
> sslfilter hangs with openjdk works with oracle?
> -----------------------------------------------
>
> Key: DIRMINA-937
> URL: https://issues.apache.org/jira/browse/DIRMINA-937
> Project: MINA
> Issue Type: Bug
> Components: Filter
> Affects Versions: 2.0.7
> Environment: OpenJDK Runtime Environment (IcedTea6 1.12.1)
> (6b27-1.12.1-2ubuntu0.12.04.2)
> OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
> Reporter: Andrew C
> Attachments: TestJDK.java
>
>
> Still gathering information, however ...
> I've a server that's using SslFilter. When I test a connection using curl
> (two different versions; curl -k --trace - https://localhost:4321) it hangs:
> - curl sends the client hello
> - never gets any response
> looking at an extract of the logs I see:
> [read] MD5 and SHA1 hashes: len = 235
> 0000: 01 00 00 E7 03 02 51 35 14 CC 56 9F 1B 4E B0 80 ......Q5..V..N..
> ...
> 00E0: 00 0F 00 10 00 11 00 0F 00 01 01 ...........
> matching alias: mykey
> [2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG
> org.apache.mina.filter.ssl.SslHandler - Session Server[2](ssl...) processing
> the NEED_UNWRAP state
> [2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG
> org.apache.mina.filter.ssl.SslFilter - Session Server[2](ssl...): Processing
> the SSL Data
> i.e., SSLEngine's indicated that it is expecting more data from curl.
> If I switch to oracle's jvm, things work - that is the NEED_UNWRAP doesn't
> appear and SSLEngine starts sending data back to the curl client:
> ...
> 00E0: 00 0F 00 10 00 11 00 0F 00 01 01 ...........
> matching alias: mykey
> %% Created: [Session-1, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA]
> *** ServerHello, TLSv1
> ...
> any one else seen this?
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
