Re: [VOTE] MINA 2.0.15 release

[Ashish]

+1

Build works fine. All test cases passed

On Wed, Sep 21, 2016 at 12:11 AM, Emmanuel Lécharny  wrote:
> Hi,
>
> Here is a new release, MINA 2.0.15. It fixes one critical SSL issue, and a 
> NPE. Javadoc has also been a bit cleaned up.
>
> Here are the fixed issues :
>
> Bugs :
> --
>
> [DIRMINA-1044 ] 
> Non-Secure (no TLS/SSL) based client could successfully send message to 
> secure Mina endpoint after second attempt
> [DIRMINA-1à43 ] 
> NullPointerException after upgrade to mina 2.0.14
>
>
>
> A temporary tag has been created (it can be removed if the vote is not 
> approved):
>
> Updated Tags:  refs/tags/2.0.15 [created] 0399f97db
>
> Project: http://git-wip-us.apache.org/repos/asf/mina/repo
> Commit: http://git-wip-us.apache.org/repos/asf/mina/commit/8bae1d4f
> Tree: http://git-wip-us.apache.org/repos/asf/mina/tree/8bae1d4f
> Diff: http://git-wip-us.apache.org/repos/asf/mina/diff/8bae1d4f
>
> - Nexus repository: 
> https://repository.apache.org/content/repositories/orgapachemina-1025
>
> - Binaries and sources: 
> https://dist.apache.org/repos/dist/dev/mina/mina/2.0.15/
>
> Let us vote :
> [ ] +1 | Release MINA 2.0.15
> [ ] ± | Abstain
> [ ] -1 | Do **NOT**  release MINA 2.0.15
>
> Thanks !
>



-- 
thanks
ashish

Blog: http://www.ashishpaliwal.com/blog
My Photo Galleries: http://www.pbase.com/ashishpaliwal

Re: [VOTE] MINA 2.0.15 release

[Jeff Genender]

+1

Jeff

> On Sep 21, 2016, at 1:11 AM, Emmanuel Lécharny  wrote:
> 
> Hi,
> 
> Here is a new release, MINA 2.0.15. It fixes one critical SSL issue, and a 
> NPE. Javadoc has also been a bit cleaned up.
> 
> Here are the fixed issues :
> 
> Bugs :
> --
> 
> [DIRMINA-1044 ] 
> Non-Secure (no TLS/SSL) based client could successfully send message to 
> secure Mina endpoint after second attempt
> [DIRMINA-1à43 ] 
> NullPointerException after upgrade to mina 2.0.14
> 
> 
> 
> A temporary tag has been created (it can be removed if the vote is not 
> approved):
> 
> Updated Tags:  refs/tags/2.0.15 [created] 0399f97db
> 
> Project: http://git-wip-us.apache.org/repos/asf/mina/repo
> Commit: http://git-wip-us.apache.org/repos/asf/mina/commit/8bae1d4f
> Tree: http://git-wip-us.apache.org/repos/asf/mina/tree/8bae1d4f
> Diff: http://git-wip-us.apache.org/repos/asf/mina/diff/8bae1d4f
> 
> - Nexus repository: 
> https://repository.apache.org/content/repositories/orgapachemina-1025
> 
> - Binaries and sources: 
> https://dist.apache.org/repos/dist/dev/mina/mina/2.0.15/
> 
> Let us vote :
> [ ] +1 | Release MINA 2.0.15
> [ ] ± | Abstain
> [ ] -1 | Do **NOT**  release MINA 2.0.15
> 
> Thanks !
> 

Re: observing hangs after update to MINA 2.0.14

[Christoph John]

OK, will open a JIRA issue and try to get a test case. It might very well be a race condition, but 
the question is why it is manifesting every time I run the test suite with MINA 2.0.14 and never 
with 2.0.13.

Will keep you updated.

Thanks,
Chris.


On 21/09/16 14:48, Emmanuel Lécharny wrote:

Le 21/09/16 à 13:17, Christoph John a écrit :

Hi,

do you need any more information from my side? Should I create a JIRA
issue? The problem can be reproduced with QuickFIX/J code but I could
check if can condense a MINA-only test case if required.

A test case would be very valuable, and, yes, a JIRA will definitvely help.

My take on this issue is that if both the client and the server close
the session more or less at the same time, one side will hang, due to
some race condition.

Re: observing hangs after update to MINA 2.0.14

[Emmanuel Lécharny]

Le 21/09/16 à 13:17, Christoph John a écrit :
> Hi,
>
> do you need any more information from my side? Should I create a JIRA
> issue? The problem can be reproduced with QuickFIX/J code but I could
> check if can condense a MINA-only test case if required.

A test case would be very valuable, and, yes, a JIRA will definitvely help.

My take on this issue is that if both the client and the server close
the session more or less at the same time, one side will hang, due to
some race condition.

Re: observing hangs after update to MINA 2.0.14

[Christoph John]

Hi,

do you need any more information from my side? Should I create a JIRA issue? The problem can be 
reproduced with QuickFIX/J code but I could check if can condense a MINA-only test case if required.


Thanks,
Chris.

On 15/09/16 11:20, Christoph John wrote:

Great, thanks in advance.

Cheers,
Chris.

On 13/09/16 11:11, Emmanuel Lecharny wrote:

Might be caused by some problem when the connection is closed on both sides
at the same time.

As soon as I get back my computer (it's being repaired atm), I will be able
to have a look at the pb.

On Mon, Sep 12, 2016 at 9:57 PM, Christoph John
wrote:


Hi,

I am maintaining the QuickFIX/J project (https://github.com/quickfix-
j/quickfixj) which uses MINA as communication library. Recently we
integrated a pull request which included calling dispose(true) on an
IoAcceptor to clean up the resources. This was no problem with MINA 2.0.13.
However, when running the QuickFIX/J test suite with MINA 2.0.14 there are
intermittent hangs when stopping the connection. I am attaching a stack
trace.
I browsed the changes in MINA 2.0.14 and found nothing that caught my eye.
But I am not so familiar with the MINA code.

Update: I just ran the test suite without the "dispose(true)" change and
am also observing the hangs with MINA 2.0.14.

Maybe someone can shed some light on this.
Many thanks in advance and best regards,
Chris.


--
Christoph John
Development & Support
Direct: +49 241 557080-28
Mailto:christoph.j...@macd.com  



http://www.macd.com
--
--
MACD GmbH
Oppenhoffallee 103
D-52066 Aachen
Tel: +49 241 557080-0 | Fax: +49 241 557080-10
  Amtsgericht Aachen: HRB 8151
Ust.-Id: DE 813021663

Geschäftsführer: George Macdonald
--
--
take care of the environment - print only if necessary





--
Christoph John
Development & Support
Direct: +49 241 557080-28
Mailto:christoph.j...@macd.com



http://www.macd.com 



MACD GmbH
Oppenhoffallee 103
D-52066 Aachen
Tel: +49 241 557080-0 | Fax: +49 241 557080-10
 Amtsgericht Aachen: HRB 8151
Ust.-Id: DE 813021663

Geschäftsführer: George Macdonald




take care of the environment - print only if necessary


--
Christoph John
Development & Support
Direct: +49 241 557080-28
Mailto:christoph.j...@macd.com



http://www.macd.com 



MACD GmbH
Oppenhoffallee 103
D-52066 Aachen
Tel: +49 241 557080-0 | Fax: +49 241 557080-10
 Amtsgericht Aachen: HRB 8151
Ust.-Id: DE 813021663

Geschäftsführer: George Macdonald




take care of the environment - print only if necessary

MINA userguide site updated

[Emmanuel Lécharny]

Hi guys,


I have slightly improved the Session pages in the MINA userGuide
(http://mina.staging.apache.org/mina-project/userguide/ch4-session/ch4-session.html)

Typically, I have added two sub-chapters, and added a lot of information.


Feel free to review those pages, and comment them, they are not yet on
the production site.


Many thanks !

[VOTE] MINA 2.0.15 release

[Emmanuel Lécharny]

Hi,

Here is a new release, MINA 2.0.15. It fixes one critical SSL issue, and a NPE. 
Javadoc has also been a bit cleaned up.

Here are the fixed issues :

Bugs :
--

[DIRMINA-1044 ] Non-Secure 
(no TLS/SSL) based client could successfully send message to secure Mina 
endpoint after second attempt
[DIRMINA-1à43 ] 
NullPointerException after upgrade to mina 2.0.14



A temporary tag has been created (it can be removed if the vote is not 
approved):

Updated Tags:  refs/tags/2.0.15 [created] 0399f97db

Project: http://git-wip-us.apache.org/repos/asf/mina/repo
Commit: http://git-wip-us.apache.org/repos/asf/mina/commit/8bae1d4f
Tree: http://git-wip-us.apache.org/repos/asf/mina/tree/8bae1d4f
Diff: http://git-wip-us.apache.org/repos/asf/mina/diff/8bae1d4f

- Nexus repository: 
https://repository.apache.org/content/repositories/orgapachemina-1025

- Binaries and sources: https://dist.apache.org/repos/dist/dev/mina/mina/2.0.15/

Let us vote :
[ ] +1 | Release MINA 2.0.15
[ ] ± | Abstain
[ ] -1 | Do **NOT**  release MINA 2.0.15

Thanks !

[jira] [Resolved] (DIRMINA-1044) Non-Secure (no TLS/SSL) based client could successfully send message to secure Mina endpoint after second attempt

[Emmanuel Lecharny (JIRA)]

 [ 
https://issues.apache.org/jira/browse/DIRMINA-1044?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Emmanuel Lecharny resolved DIRMINA-1044.

   Resolution: Fixed
Fix Version/s: 2.0.15

I mark it as fixed, thanks to Thomas Papke for the report and the check !

> Non-Secure (no TLS/SSL) based client could successfully send message to 
> secure Mina endpoint after second attempt
> -
>
> Key: DIRMINA-1044
> URL: https://issues.apache.org/jira/browse/DIRMINA-1044
> Project: MINA
>  Issue Type: Bug
>  Components: Filter
>Affects Versions: 2.0.13, 2.0.14
>Reporter: Thomas Papke
> Fix For: 2.0.15
>
> Attachments: testcase.patch
>
>
> Following scenario:
> - We have a server application using Mina2. This endpoint is configured with 
> Mina SSLFilter (clientAuth=MUST, no startTLS support)
> If a client application (not able to do any kind of SSL) try to connect, we 
> have identified the following.
> 1. TCP connection --> could be successfully established (might be Ok)
> {code}
> 2016-09-16T03:23:47,423 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslFilter(432) - Adding the SSL Filter ssl to the 
> chain
> 2016-09-16T03:23:47,455 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslHandler(147) - Session Server[2](no sslEngine) 
> Initializing the SSL Handler
> Using SSLEngineImpl.
> Allow unsafe renegotiation: false
> Allow legacy hello messages: true
> Is initial handshake: true
> Is secure renegotiation: false
> Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 
> for TLSv1
> Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for 
> TLSv1
> Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
> Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for 
> TLSv1
> Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for 
> TLSv1
> Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for 
> TLSv1
> Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for 
> TLSv1
> Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 
> for TLSv1.1
> Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for 
> TLSv1.1
> Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
> Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for 
> TLSv1.1
> Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for 
> TLSv1.1
> Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for 
> TLSv1.1
> Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for 
> TLSv1.1
> 2016-09-16T03:23:47,455 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslHandler(198) - Session Server[2](no sslEngine) 
> SSL Handler Initialization done.
> 2016-09-16T03:23:47,455 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslFilter(718) - Session Server[2](ssl...) : 
> Starting the first handshake
> 2016-09-16T03:23:47,455 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslHandler(572) - Session Server[2](ssl...) 
> processing the NEED_UNWRAP state
> 2016-09-16T03:23:47,471 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.executor.OrderedThreadPoolExecutor(432) - Adding event 
> SESSION_OPENED to session 2
> Queue : [SESSION_OPENED, ]
> 2016-09-16T03:23:47,471 DEBUG [pool-32-thread-1] 
> org.apache.mina.core.filterchain.IoFilterEvent(68) - Firing a SESSION_OPENED 
> event for session 2
> 2016-09-16T03:23:47,486 DEBUG [pool-32-thread-1] 
> org.apache.mina.core.filterchain.IoFilterEvent(117) - Event SESSION_OPENED 
> has been fired for session 2
> {code}
> 2. Client transmit some non-ssl encrypted payload --> client run into a 
> timeout, TCP connection remain open
> {code}
> 2016-09-16T03:24:04,693 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslFilter(484) - Session Server[2](ssl...): 
> Message received : HeapBuffer[pos=0 lim=873 cap=2048: 0B 4D 53 48 7C 5E 7E 5C 
> 26 7C 4E 45 53 7C 4E 49...]
> 2016-09-16T03:24:04,693 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslHandler(346) - Session Server[2](ssl...) 
> Processing the received message
> 2016-09-16T03:24:04,693 DEBUG [NioProcessor-21] 
> org.apache.mina.filter.ssl.SslHandler(572) - Session Server[2](ssl...) 
> processing the NEED_UNWRAP state
> NioProcessor-21, fatal error: 80: problem unwrapping net record
> javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
> NioProcessor-21, SEND TLSv1.2 ALERT:  fatal, description = internal_error
> NioProcessor-21, WRITE: TLSv1.2 Alert, length = 2
> 2016-09-16T03:24:04,694 DEBUG [NioProcessor-21] 
>