Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4666210

in 1.0.x, setEnableSessionCreation is broken on the first handshake

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: P5 P5
    • None
    • 1.0.2
    • security-libs
    • None

      public class sess {

          public static void main(String args[]) throws Exception {
              SSLSocketFactory sslsf =
                  (SSLSocketFactory) SSLSocketFactory.getDefault();
              SSLSocket ssls = (SSLSocket) sslsf.createSocket("localhost", 2001);

              ssls.setEnableSessionCreation(false);
              ssls.startHandshake();
          }
      }

      The above should not allow any sessions to be created,
      as session creation is turned off for this socket. However,
      we're seeing that the session creation for the first
      handshake isn't respecting this, but later ones are.

      ###@###.### 2002-04-10

            wetmore Bradford Wetmore
            wetmore Bradford Wetmore
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: