[DIRMINA-937] sslfilter hangs with openjdk works with oracle?

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Abandoned
• Affects Version/s: 2.0.7
• Fix Version/s: 2.0.8
• Component/s: Filter
• Environment: OpenJDK Runtime Environment (IcedTea6 1.12.1) (6b27-1.12.1-2ubuntu0.12.04.2); OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode)
• Assignee: Unassigned
• Reporter: Andrew C
• Created: 05/Mar/13 15:59
• Updated: 24/May/19 14:03
• Resolved: 24/May/19 14:03

Description

Still gathering information, however ...

I've a server that's using SslFilter. When I test a connection using curl (two different versions; curl -k --trace - https://localhost:4321) it hangs:

• curl sends the client hello
• never gets any response

looking at an extract of the logs I see:

[read] MD5 and SHA1 hashes: len = 235
0000: 01 00 00 E7 03 02 51 35 14 CC 56 9F 1B 4E B0 80 ......Q5..V..N..
...
00E0: 00 0F 00 10 00 11 00 0F 00 01 01 ...........
matching alias: mykey
[2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG org.apache.mina.filter.ssl.SslHandler - Session Server[2](ssl...) processing the NEED_UNWRAP state
[2013-03-04=16:40:28.836] [NioProcessor-1] DEBUG org.apache.mina.filter.ssl.SslFilter - Session Server[2](ssl...): Processing the SSL Data

i.e., SSLEngine's indicated that it is expecting more data from curl.

If I switch to oracle's jvm, things work - that is the NEED_UNWRAP doesn't appear and SSLEngine starts sending data back to the curl client:

...
00E0: 00 0F 00 10 00 11 00 0F 00 01 01 ...........
matching alias: mykey
%% Created: [Session-1, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA]

• • • ServerHello, TLSv1
      ...

any one else seen this?