-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Tom,
On 7/1/19 12:17, Tom Kuo wrote: > I'm running Tomcat 8.5.39 on an ubuntu 18.04 server that is > experiencing some weird results when trying to upgrade a secure > websocket request from Safari. Safari is returning an "invalid > utf-8 sequence" in the browser console when processing the request, > looking at the response headers Well, if Safari is encountering an invalid utf-8 sequence, it's probably aborting immediately. > in Safari devTools i see that there are no response headers being > sent back. I also reproduce this Tomcat is being hosted on Windows > as well.> I turned on debugging on in Tomcat but didn't see > anything error out on Tomcat's side. Searching both safari & > tomcat forums didn't yield much about this particular scenario. > What's interesting is that a non ssl request works fine. Also > interestingly enough, when i hit another server using an Apache > reverse proxy to handle the SSL handshake and forward off to Tomcat > that also works. Are you able to put a packet analyzer into the mix? My guess is that part of the TLS handshake is being interpreted by Safari as response dat a. > I tried using the native libs and upgrading to the lastest openssl > but the request still fails. What is your <Connector> configuration? Does this happen when using NIO+JSSE as well, or only JSSE+OpenSSL (or APR+OpenSSL)? > No other major browser seems to be doing this (Chrome, FF work > fine) I'm kinda at a lost as to why this one particular scenario > seems to be failing, any ideas? - -chris -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl0adncACgkQHPApP6U8 pFjGTxAAgD6dO6InE5ZTw9PZw5lyif3vmie1UGPwcZhOSJCqZpFO5P4BpECkKtmX xWnlB0wE6EckGx5z7JwqtAukYmVFJHc0AcZTfK8exL2Y3deS6l94ZwGkiLp4Nzla nfa/HXFAeY0ZYInXA7TCMxlCCY+u7l8/4c44hRF1rjKFMB2LgDxxgJk6/tTZCnVX R5V9cD/vFM2LAP088DTy62/JA/7WiJRnoMpDGzCSS18CtCgrjmgvc08YY/+eCZnh eccE0/EOFsWz7cWPRPisfjScuHkYWlAFkOHKqUJPGLQ2U+yu9r80si+xmvlZBGLt 7fBZb7qllBZ6hO7vQlrg617TPHkGTezNyBw8cOKLtqWZiYDSi9G5PP4+UGYFZ6et ljeyDdS/YI2EFr1cN1sac1XWjX9iOXTGxXp+L3jxJP3YCrUS5a8xsn7fqjy5KjXy RxDjzvfyZxY41tWWxx2glCDGmYqAr4ZoaCSblQlpy0aw6NHtHKHUqtr74EuTf3Vo NtEtQVABGaTO7VCnTq/l7C+8BqlCRxBbQJyZJDL56gkB5pVW/ZTqQ8cKLwxN/Rq0 QW4ugljvoyaKG3KYyj89y2tvtdupA1OdCf8//yJTSKyVLQBiESvAwAblxdX1GqJ/ jvfyuitr2/BSEFcgOb+V0RX/dLcUx/scQrE4RT4qf1pzOpDmGkc= =sANa -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org