Re: RFR: 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server [v20]

[Xue-Lei Andrew Fan]

On Fri, 11 Oct 2024 18:36:50 GMT, Artur Barashev <abaras...@openjdk.org> wrote:

>> Check for unexpected plaintext alert message during TLSv1.3 handshake. This 
>> can happen if client doesn't receive ServerHello due to network timeout and 
>> tries to close the connection by sending an alert message.
>
> Artur Barashev has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   Adjust line length

src/java.base/share/classes/sun/security/ssl/SSLTransport.java line 131:

> 129:             throw context.fatal(Alert.BAD_RECORD_MAC, bte);
> 130:         } catch (BadPaddingException bpe) {
> 131:             // Check for unexpected plaintext alert message during 
> TLSv1.3+ handshake.

Could the case happen for SSLEngine as well?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/21043#discussion_r1804072063