Re: Backport of JDK-8014618 to JDK6? (Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement)

2014-07-10 Thread Alex Bligh
Xulei, In this case I'm afraid I have confirmed that it is *not* the cause of the particular failure we are seeing (the failure turned out to be elsewhere after many hours debugging). However, reading the code it would seem this should still be an issue, and if it is an issue should presumably be

Re: Do not JDK-6967684 backport to JDK6?

2014-07-10 Thread KUBOTA Yuji
Hi, (2014/07/11 0:24 JST), Omair Majid wrote: I have not reviewed this patch yet, but I would like to request that you hold off on this patch for a few days. I am currently working on updating OpenJDK 6 for the security update due on 2014-07-15. Thanks for your help! Yes, I do not want to inte

Re: Backport of JDK-8014618 to JDK6? (Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement)

2014-07-10 Thread Xuelei Fan
Hi Alex, Has you confirmed that JDK-8014618 is the root cause of the failure? If no, would you mind enabled JSSE debug log (using system property, "javax.net.debug=all"), reproduce the bug and send me the debug log that contains the fall SSL/TLS handshaking messages of the failure? A reproducibl

Re: Do not JDK-6967684 backport to JDK6?

2014-07-10 Thread Omair Majid
Hi, * KUBOTA Yuji [2014-07-10 05:34]: > I hope to backport this patch if there is no specific reason to block. I have not reviewed this patch yet, but I would like to request that you hold off on this patch for a few days. I am currently working on updating OpenJDK 6 for the security update due

Backport of JDK-8014618 to JDK6? (Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement)

2014-07-10 Thread Alex Bligh
I'm investigating an intermittent failure of TLS to connect to certain hosts with a JDK6 based client. The symptoms look identical to JDK-8014618, i.e. a failure of SSL negotiation approximately one in 256 times. The relevant bug report https://bugs.openjdk.java.net/browse/JDK-8014618?page=com.

Re: Do not JDK-6967684 backport to JDK6?

2014-07-10 Thread KUBOTA Yuji
Thank you for response and CC to proper ml :) I hope to backport this patch if there is no specific reason to block. Yuji (2014/07/04 20:46), Ivan Krylov wrote: Don’t have an answer this but CC-ing openjdk6-dev Ivan On 23 Jun 2014, at 07:03, KUBOTA Yuji wrote: Hi all, I got ArrayIndexOut