[KAFKA-16471] SslTransportLayer may leak SSLEngine resources

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.7.0, 3.6.1
• Fix Version/s: 3.8.0, 3.7.1
• Component/s: network
• Assignee: Gaurav Narula
• Reporter: Gaurav Narula
• Created: 04/Apr/24 13:44
• Updated: 05/Apr/24 09:49
• Resolved: 05/Apr/24 09:49

Description

SslTransportLayer does not invoke SSLEngine::closeInbound in close() after flushing the close_notify TLS alert.

While this isn't a problem for the default JDK SSLEngine, it results in resource leak in Netty/OpenSSL based SSLEngine which frees native resources only when closeInbound is invoked.

Issue Links

• links to: GitHub Pull Request #15655