mina-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew C (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (DIRMINA-937) sslfilter hangs with openjdk works with oracle?
Date Wed, 06 Mar 2013 15:10:13 GMT

    [ https://issues.apache.org/jira/browse/DIRMINA-937?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13594762#comment-13594762
] 

Andrew C commented on DIRMINA-937:
----------------------------------

> I can't reproduce the pb with the coe snippet you provided. I need everything related
to the KeyStore creation and initialization.

Not needed.  See further down in the comment; I can reproduce it using just the MINA sources
by tweaking examples.echoserver.Main.

> Does it work with OpenJDK 7 btw ? (I don't have OpnJDK 6 installed locally)

That's part of the information I'm still gathering; will hopefully end up with a table :-)
                
> sslfilter hangs with openjdk works with oracle?
> -----------------------------------------------
>
>                 Key: DIRMINA-937
>                 URL: https://issues.apache.org/jira/browse/DIRMINA-937
>             Project: MINA
>          Issue Type: Bug
>          Components: Filter
>    Affects Versions: 2.0.7
>         Environment: OpenJDK Runtime Environment (IcedTea6 1.12.1) (6b27-1.12.1-2ubuntu0.12.04.2)
> OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
>            Reporter: Andrew C
>
> Still gathering information, however ...
> I've a server that's using SslFilter.  When I test a connection using curl (two different
versions; curl -k --trace - https://localhost:4321) it hangs:
> - curl sends the client hello
> - never gets any response
> looking at an extract of the logs I see:
> [read] MD5 and SHA1 hashes:  len = 235
> 0000: 01 00 00 E7 03 02 51 35   14 CC 56 9F 1B 4E B0 80  ......Q5..V..N..
> ...
> 00E0: 00 0F 00 10 00 11 00 0F   00 01 01                 ...........
> matching alias: mykey
> [2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG org.apache.mina.filter.ssl.SslHandler
- Session Server[2](ssl...) processing the NEED_UNWRAP state
> [2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG org.apache.mina.filter.ssl.SslFilter
- Session Server[2](ssl...): Processing the SSL Data
> i.e., SSLEngine's indicated that it is expecting more data from curl.
> If I switch to oracle's jvm, things work - that is the NEED_UNWRAP doesn't appear and
SSLEngine starts sending data back to the curl client:
> ...
> 00E0: 00 0F 00 10 00 11 00 0F   00 01 01                 ...........
> matching alias: mykey
> %% Created:  [Session-1, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA]
> *** ServerHello, TLSv1
> ...
> any one else seen this?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message