[DIRMINA-880] Implementation of SslFilter#isCloseNotify() is incorrect

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.4
• Fix Version/s: 2.0.5
• Component/s: Filter
• Environment: RHEL 5.6
• Assignee: Emmanuel Lécharny
• Reporter: Dimitar Mavrodiev
• Created: 19/Dec/11 16:08
• Updated: 20/Dec/11 00:57
• Resolved: 20/Dec/11 00:57

Description

SslFilter#isCloseNotify() shouldn't probe for the 4th byte as its value may vary. Current implementation doesn't also cover SSL 3.0/TLS 1.1/TLS 1.2. I've created a patch that I believe has it right. Note that probes for SSL 2.0 are intentionally excluded as SSL 2.0 use has been prohibited by RFC 6176.