In theory, there are intermittent compatibility problems as this update
may not close the SSL connection over the existing socket layer
gracefully, even for high speed networking environments, while the
underlying socket is alive. The impact could be serious in some
environment.
For safe, I
On 9/13/2017 5:52 AM, Xuelei Fan wrote:
In theory, there are intermittent compatibility problems as this update
may not close the SSL connection over the existing socket layer
gracefully, even for high speed networking environments, while the
underlying socket is alive. The impact could be s
Hi Xuelei,
This behaviour is already exposed via the autoclose boolean in:
https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLSocketFactory.html#createSocket-java.net.Socket-java.io.InputStream-boolean-
My position would be that allowing 5 retries allows us to say with some
confidence th
Xuelei,
Without diving deeper into this issue, Rob’s suggested approach seems
reasonable to me, and better than existing out-of-the-box behaviour. I’m not
sure what issues you are thinking of, with using the read timeout in
combination with a retry mechanism, in this manner? If the network is s
On 9/13/2017 8:52 AM, Rob McKenna wrote:
Hi Xuelei,
This behaviour is already exposed via the autoclose boolean in:
https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLSocketFactory.html#createSocket-java.net.Socket-java.io.InputStream-boolean-
I did not get the point. What do you me
On 9/13/2017 8:52 AM, Rob McKenna wrote:
W.r.t. a separate timeout, the underlying mechanics of a close already
depend on the readTimeout in this situation.
That's a concerns of mine. In order to work for your countermeasure,
applications have to set receiving timeout, and take care of the clos
It's a little bit complicated for layered SSL connections. Application
can build a SSL connection on existing socket (we call it layered SSL
connections). The problem scenarios make look like:
1. open a socket for applications.
2. established a SSL connection on the existing socket.
3. close t
