[
https://issues.apache.org/jira/browse/DIRMINA-1199?focusedWorklogId=1046413&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1046413
]
ASF GitHub Bot logged work on DIRMINA-1199:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 08/Oct/26 14:46
Start Date: 08/Oct/26 14:46
Worklog Time Spent: 10m
Work Description: jon-valliere commented on PR #77:
URL: https://github.com/apache/mina/pull/77#issuecomment-6062446439
I had Claude look into it and provided some background.
**Root cause / history**
The `synchronized (queue)` blocks around the drain loops were part of the
original G1 design. From the description of #44:
> The code which pulls objects out of this Queue is blocked by itself so no
two threads can be pulling from the Queue concurrently.
They were commented out in 62643fece ("alright lets remove all the
synchronization from the queue flushes"). That was an experiment on the
in-progress `bugfix/DIRMINA-1173` branch. I never meant it to be merged. The
branch was later merged into `2.2.X` together with unrelated maintenance work,
so the experiment shipped in 2.2.4. This PR restores the intended design.
**Why `mWriteQueue` is the one that matters**
Encryption happens under the handler monitor, so records go into
`mWriteQueue` in the correct order. The drain runs after the monitor is
released, though, and it's reached from several threads at once:
- the application thread: `write()` → `forward_writes`
- the IO processor thread: `ack()` → `flush_start` (which encrypts more
queued chunks because of `MAX_UNACK_MESSAGES`) → `forward_writes`
- the receive path: `receive()` → `forward_writes`
If two threads poll consecutive records and reach `filterWrite` in the
opposite order, the records go out of order on the wire. TLS sequence numbers
are implicit, so the peer fails with `bad_record_mac` or corrupted data. Large
messages split into several records make this much more likely. That fits
@elecharny's observation that locking `mWriteQueue` alone makes the test pass.
`mReceiveQueue` needs the same protection. `receive()` normally runs on one
IO thread per session, but a thread-dispatching filter can be placed in front
of `SslFilter`. Decryption in `receive_start` is serialized by the handler
monitor, but `forward_received` drains after that monitor is released. Without
the lock, one thread can still be delivering its decrypted buffers while
another decrypts the next message and drains too, and the application receives
the plaintext out of order. `mEventQueue` is exposed the same way. All three
locks belong to the original design and should stay.
**Requested changes**
1. **Debug logging:** please drop the new entry logs in `forward_*()`. They
add 2–3 lines per event and don't say much. The existing per-item logs are
enough.
2. **`SslFilterTest`:**
- The 61000–80000 loop is ~19k round trips, which is too slow for the
regular build. A handful of sizes around the record/packet boundaries should be
enough.
- `CompareFilter` only logs on a data mismatch and then counts down the
latch, so corrupted data doesn't fail the test. Please record it as a failure
(e.g. set `failure`) so the assertion catches it.
- Progress is logged at `ERROR` level; please use `DEBUG`.
- Missing newline at end of file.
3. **`SslEnd2EndTest`** is bidirectional and asserts the content, which
covers what was asked for earlier. If it reproduces the failure reliably
without the fix, I'd be fine keeping only this one.
+1 on the fix itself once the tests are cleaned up.
Issue Time Tracking
-------------------
Worklog Id: (was: 1046413)
Time Spent: 2h (was: 1h 50m)
> Still having issue when dealing with TLS exchanges
> --------------------------------------------------
>
> Key: DIRMINA-1199
> URL: https://issues.apache.org/jira/browse/DIRMINA-1199
> Project: MINA
> Issue Type: Bug
> Affects Versions: 2.2.9
> Reporter: Emmanuel Lécharny
> Priority: Blocker
> Attachments: SslFilterTest.java
>
> Time Spent: 2h
> Remaining Estimate: 0h
>
> When using TLS sessions in Apache DS, we are still facing errors:
>
> {code:java}
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Message received: HeapBuffer@575fd43e[pos=0 lim=16384 cap=50040: 00 00 FF 4E
> F7 4E 80 85 0B 59 39 C1 A9 80 C9 E8]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Partial SASL message received: 16380/65358
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] forward_received() -
> received HeapBuffer@3bd3b4f5[pos=0 lim=16384 cap=33360: 40 A9 14 26 7A 1C 0B
> FD 75 B1 3A 0C A2 E2 56 08]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Message received: HeapBuffer@3bd3b4f5[pos=0 lim=16384 cap=33360: 40 A9 14 26
> 7A 1C 0B FD 75 B1 3A 0C A2 E2 56 08]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Partial SASL message received: 32764/65358
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] forward_received() -
> received HeapBuffer@7dc70c6b[pos=0 lim=16384 cap=16680: EB 43 18 7E A1 A2 3A
> 36 67 14 D3 D0 87 6B 06 0C]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Message received: HeapBuffer@7dc70c6b[pos=0 lim=16384 cap=16680: EB 43 18 7E
> A1 A2 3A 36 67 14 D3 D0 87 6B 06 0C]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Partial SASL message received: 49148/65358
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - SERVER: Session
> (0x00000001: nio socket, server, localhost/127.0.0.1:64618 =>
> /127.0.0.1:64617) received HeapBuffer@e33fa4a[pos=0 lim=65536 cap=65536: 17
> 03 03 3F 6A 00 00 00 00 00 00 00 10 B4 A7 45]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] receive() - message
> HeapBuffer@e33fa4a[pos=0 lim=65536 cap=65536: 17 03 03 3F 6A 00 00 00 00 00
> 00 00 10 B4 A7 45]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] receive_loop() - source
> HeapBuffer@e33fa4a[pos=0 lim=65536 cap=65536: 17 03 03 3F 6A 00 00 00 00 00
> 00 00 10 B4 A7 45]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] receive_loop() -
> bytes-consumed 16239, bytes-produced 16210, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] receive_loop() - result
> HeapBuffer@27e42196[pos=0 lim=16210 cap=66720: B6 B9 CE 9C FB 03 DF 94 98 05
> 0C 17 B2 04 10 F7]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] receive_loop() - trying to
> decode more messages, looping
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] receive_loop() - source
> HeapBuffer@e33fa4a[pos=16239 lim=65536 cap=65536: 17 03 03 40 18 00 00 00 00
> 00 00 00 12 C1 9E 57]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@18a79b83[mode=server, connected=true] forward_received() -
> received HeapBuffer@27e42196[pos=0 lim=16210 cap=66720: B6 B9 CE 9C FB 03 DF
> 94 98 05 0C 17 B2 04 10 F7]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Message received: HeapBuffer@27e42196[pos=0 lim=16210 cap=66720: B6 B9 CE 9C
> FB 03 DF 94 98 05 0C 17 B2 04 10 F7]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] - Will
> use SASL to unwrap received message of length: 65358
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Sending encrypted token of length 65362.
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - CLIENT: Session
> (0x00000002: nio socket, client, /127.0.0.1:64618 =>
> localhost/127.0.0.1:64617) write WriteRequest: HeapBuffer@39651a82[pos=0
> lim=65362 cap=65362: 00 00 FF 4E 74 34 15 26 CB F1 BD A5 4A FE A2 03]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write() - source
> WriteRequest: HeapBuffer@39651a82[pos=0 lim=65362 cap=65362: 00 00 FF 4E 74
> 34 15 26 CB F1 BD A5 4A FE A2 03]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@39651a82[pos=0 lim=65362 cap=65362: 00 00 FF 4E 74
> 34 15 26 CB F1 BD A5 4A FE A2 03]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16384, bytes-produced 16413, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@6be7bf6d[pos=0 lim=16413 cap=66836: 17 03 03 40 18
> 00 00 00 00 00 00 00 15 28 27 29]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@39651a82[pos=0 lim=65362 cap=65362: 00 00 FF 4E 74
> 34 15 26 CB F1 BD A5 4A FE A2 03]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16384, bytes-produced 16413, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@134c370e[pos=0 lim=16413 cap=50127: 17 03 03 40 18
> 00 00 00 00 00 00 00 16 16 4F AD]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@39651a82[pos=0 lim=65362 cap=65362: 00 00 FF 4E 74
> 34 15 26 CB F1 BD A5 4A FE A2 03]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16384, bytes-produced 16413, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@33364212[pos=0 lim=16413 cap=33418: 17 03 03 40 18
> 00 00 00 00 00 00 00 17 75 68 0E]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@39651a82[pos=0 lim=65362 cap=65362: 00 00 FF 4E 74
> 34 15 26 CB F1 BD A5 4A FE A2 03]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16210, bytes-produced 16239, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@2216effc[pos=0 lim=16239 cap=33418: 17 03 03 3F 6A
> 00 00 00 00 00 00 00 18 34 DB 4C]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] forward_writes() - writing
> WriteRequest: HeapBuffer@6be7bf6d[pos=0 lim=16413 cap=66836: 17 03 03 40 18
> 00 00 00 00 00 00 00 15 28 27 29]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] forward_writes() - writing
> WriteRequest: HeapBuffer@134c370e[pos=0 lim=16413 cap=50127: 17 03 03 40 18
> 00 00 00 00 00 00 00 16 16 4F AD]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] forward_writes() - writing
> WriteRequest: HeapBuffer@33364212[pos=0 lim=16413 cap=33418: 17 03 03 40 18
> 00 00 00 00 00 00 00 17 75 68 0E]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] forward_writes() - writing
> WriteRequest: HeapBuffer@2216effc[pos=0 lim=16239 cap=33418: 17 03 03 3F 6A
> 00 00 00 00 00 00 00 18 34 DB 4C]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - CLIENT: Session
> (0x00000002: nio socket, client, /127.0.0.1:64618 =>
> localhost/127.0.0.1:64617) ack WriteRequest: HeapBuffer@6be7bf6d[pos=0
> lim=16413 cap=66836: 17 03 03 40 18 00 00 00 00 00 00 00 15 28 27 29]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - accepted
> WriteRequest: HeapBuffer@6be7bf6d[pos=0 lim=16413 cap=66836: 17 03 03 40 18
> 00 00 00 00 00 00 00 15 28 27 29]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - checking to see if
> any messages can be flushed
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] flush() - no saved messages
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - CLIENT: Session
> (0x00000002: nio socket, client, /127.0.0.1:64618 =>
> localhost/127.0.0.1:64617) ack WriteRequest: HeapBuffer@134c370e[pos=0
> lim=16413 cap=50127: 17 03 03 40 18 00 00 00 00 00 00 00 16 16 4F AD]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - accepted
> WriteRequest: HeapBuffer@134c370e[pos=0 lim=16413 cap=50127: 17 03 03 40 18
> 00 00 00 00 00 00 00 16 16 4F AD]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - checking to see if
> any messages can be flushed
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] flush() - no saved messages
> [08:17:14] DEBUG [org.apache.mina.filter.codec.ProtocolCodecFilter-] -
> Processing a MESSAGE_RECEIVED for session 1
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - CLIENT: Session
> (0x00000002: nio socket, client, /127.0.0.1:64618 =>
> localhost/127.0.0.1:64617) ack WriteRequest: HeapBuffer@33364212[pos=0
> lim=16413 cap=33418: 17 03 03 40 18 00 00 00 00 00 00 00 17 75 68 0E]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - accepted
> WriteRequest: HeapBuffer@33364212[pos=0 lim=16413 cap=33418: 17 03 03 40 18
> 00 00 00 00 00 00 00 17 75 68 0E]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - checking to see if
> any messages can be flushed
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] flush() - no saved messages
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - CLIENT: Session
> (0x00000002: nio socket, client, /127.0.0.1:64618 =>
> localhost/127.0.0.1:64617) ack WriteRequest: HeapBuffer@2216effc[pos=0
> lim=16239 cap=33418: 17 03 03 3F 6A 00 00 00 00 00 00 00 18 34 DB 4C]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - accepted
> WriteRequest: HeapBuffer@2216effc[pos=0 lim=16239 cap=33418: 17 03 03 3F 6A
> 00 00 00 00 00 00 00 18 34 DB 4C]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] ack() - checking to see if
> any messages can be flushed
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] flush() - no saved messages
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Sending encrypted token of length 65362.
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslFilter-] - CLIENT: Session
> (0x00000002: nio socket, client, /127.0.0.1:64618 =>
> localhost/127.0.0.1:64617) write WriteRequest: HeapBuffer@745c2004[pos=0
> lim=65362 cap=65362: 00 00 FF 4E C3 BD 4E BB A1 34 51 77 DE 14 C3 EB]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write() - source
> WriteRequest: HeapBuffer@745c2004[pos=0 lim=65362 cap=65362: 00 00 FF 4E C3
> BD 4E BB A1 34 51 77 DE 14 C3 EB]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@745c2004[pos=0 lim=65362 cap=65362: 00 00 FF 4E C3
> BD 4E BB A1 34 51 77 DE 14 C3 EB]
> [08:17:14] WARN [org.apache.directory.server.ldap.LdapProtocolHandler-] -
> Unexpected exception forcing session to close: sending disconnect notice to
> client.
> javax.net.ssl.SSLException: Tag mismatch!
> at sun.security.ssl.Alert.createSSLException(Alert.java:133)
> at sun.security.ssl.TransportContext.fatal(TransportContext.java:324)
> at sun.security.ssl.TransportContext.fatal(TransportContext.java:267)
> at sun.security.ssl.TransportContext.fatal(TransportContext.java:262)
> at sun.security.ssl.SSLTransport.decode(SSLTransport.java:119)
> at sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:588)
> at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:544)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:411)
> at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:390)
> at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:626)
> at
> org.apache.mina.filter.ssl.SSLHandlerG1.receive_loop(SSLHandlerG1.java:250)
> at
> org.apache.mina.filter.ssl.SSLHandlerG1.receive_loop(SSLHandlerG1.java:311)
> at
> org.apache.mina.filter.ssl.SSLHandlerG1.receive_start(SSLHandlerG1.java:201)
> at org.apache.mina.filter.ssl.SSLHandlerG1.receive(SSLHandlerG1.java:179)
> at
> org.apache.mina.filter.ssl.SslFilter.messageReceived(SslFilter.java:441)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:650)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.access$1300(DefaultIoFilterChain.java:49)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain$EntryImpl$1.messageReceived(DefaultIoFilterChain.java:1128)
> at
> org.apache.mina.core.filterchain.IoFilterAdapter.messageReceived(IoFilterAdapter.java:122)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:650)
> at
> org.apache.mina.core.filterchain.DefaultIoFilterChain.fireMessageReceived(DefaultIoFilterChain.java:643)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor.read(AbstractPollingIoProcessor.java:539)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor.access$1200(AbstractPollingIoProcessor.java:68)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.process(AbstractPollingIoProcessor.java:1224)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.process(AbstractPollingIoProcessor.java:1213)
> at
> org.apache.mina.core.polling.AbstractPollingIoProcessor$Processor.run(AbstractPollingIoProcessor.java:683)
> at
> org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:64)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
> at java.lang.Thread.run(Thread.java:748)
> Caused by: javax.crypto.AEADBadTagException: Tag mismatch!
> at
> com.sun.crypto.provider.GaloisCounterMode.decryptFinal(GaloisCounterMode.java:620)
> at com.sun.crypto.provider.CipherCore.finalNoPadding(CipherCore.java:1116)
> at
> com.sun.crypto.provider.CipherCore.fillOutputBuffer(CipherCore.java:1053)
> at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:941)
> at com.sun.crypto.provider.AESCipher.engineDoFinal(AESCipher.java:491)
> at javax.crypto.CipherSpi.bufferCrypt(CipherSpi.java:779)
> at javax.crypto.CipherSpi.engineDoFinal(CipherSpi.java:730)
> at javax.crypto.Cipher.doFinal(Cipher.java:2463)
> at
> sun.security.ssl.SSLCipher$T12GcmReadCipherGenerator$GcmReadCipher.decrypt(SSLCipher.java:1606)
> at
> sun.security.ssl.SSLEngineInputRecord.decodeInputRecord(SSLEngineInputRecord.java:240)
> at
> sun.security.ssl.SSLEngineInputRecord.decode(SSLEngineInputRecord.java:197)
> at
> sun.security.ssl.SSLEngineInputRecord.decode(SSLEngineInputRecord.java:160)
> at sun.security.ssl.SSLTransport.decode(SSLTransport.java:109)
> ... 25 more
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16384, bytes-produced 16413, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@6da9dc6[pos=0 lim=16413 cap=66836: 17 03 03 40 18 00
> 00 00 00 00 00 00 19 27 52 FA]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@745c2004[pos=0 lim=65362 cap=65362: 00 00 FF 4E C3
> BD 4E BB A1 34 51 77 DE 14 C3 EB]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16384, bytes-produced 16413, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@7fd69dd[pos=0 lim=16413 cap=50127: 17 03 03 40 18 00
> 00 00 00 00 00 00 1A C0 45 B5]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@745c2004[pos=0 lim=65362 cap=65362: 00 00 FF 4E C3
> BD 4E BB A1 34 51 77 DE 14 C3 EB]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16384, bytes-produced 16413, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@12010fd1[pos=0 lim=16413 cap=33418: 17 03 03 40 18
> 00 00 00 00 00 00 00 1B 69 6A 67]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - source
> WriteRequest: HeapBuffer@745c2004[pos=0 lim=65362 cap=65362: 00 00 FF 4E C3
> BD 4E BB A1 34 51 77 DE 14 C3 EB]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() -
> bytes-consumed 16210, bytes-produced 16239, status OK, handshake
> NOT_HANDSHAKING
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] write_loop() - result
> WriteRequest: HeapBuffer@7c84195[pos=0 lim=16239 cap=33418: 17 03 03 3F 6A 00
> 00 00 00 00 00 00 1C DE D6 41]
> [08:17:14] DEBUG [org.apache.mina.filter.ssl.SslHandler-] -
> SSLHandlerG1@49f42944[mode=client, connected=true] forward_writes() - writing
> WriteRequest: HeapBuffer@6da9dc6[pos=0 lim=16413 cap=66836: 17 03 03 40 18 00
> 00 00 00 00 00 00 19 27 52 FA]
> [08:17:14] DEBUG [org.apache.directory.api.ldap.codec.api.SaslFilter-] -
> Filtering write request: WriteRequest: MessageType : EXTENDED_RESPONSE
> Message ID : 0
> Extended Response
> ResponseName :'1.3.6.1.4.1.1466.20036'
> Ldap Result
> Result code : (PROTOCOL_ERROR) protocolError
> Matched Dn : 'null'
> Diagnostic message : 'PROTOCOL_ERROR: The server will
> disconnect!' {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
