[CLOUDSTACK-5723] Malfunction agent may block future SSL connection to the server

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 4.2.0, 4.3.0
• Fix Version/s: 4.2.1, 4.3.0
• Component/s: Management Server
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Sheng Yang
• Reporter: Sheng Yang
• Created: 02/Jan/14 19:31
• Updated: 02/Jan/14 21:57
• Resolved: 02/Jan/14 21:57

Description

If one agent failed to process the SSL handshake process, it would block the future incoming connections to mgmt server.
Then all the future connection to the mgmt server would be hold infinitely until the malfunction agent exit.
The reason is we use blocking mode in communication when try to do SSL handshake process, though we have mechanism to protect mgmt from malfunction agent who try to exchange handshake info too many times, we don't have mechanism on stop one agent didn't response the handshake.