Name: gm110360 Date: 04/30/2002


FULL PRODUCT VERSION :
java version "1.4.0"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.0-b92)
Java HotSpot(TM) Client VM (build 1.4.0-b92, mixed mode)

FULL OPERATING SYSTEM VERSION : Windows XP, Win2K


ADDITIONAL OPERATING SYSTEMS : all Windows



EXTRA RELEVANT SYSTEM CONFIGURATION :
fast Ethernet

A DESCRIPTION OF THE PROBLEM :
Connecting over https URL connection takes forever.

Please look at

https://fpl.uroam.com/bonus/testright.html

and compare to

http://fpl.uroam.com/bonus/testright.html

The code downloads a chunk of data using URLConnection
every second. Overhead on connect normally is 10-20 msec,
and in IE-NS 4.x there's no noticeable difference
between http and https.

and also to the performance of this applet in IE with
microsoft VM and Communicator 4.x


My hunch based on the level 5 trace in the Console
is that you folks decided not to rely on the
browser-provided https transport and implemented your
own. Well, congratulations, it sucks rocks. Nothing is
cached. Certs are validated on every request, neither
authorization already performed by the browser is used,
nor previous validation is cached.

An applet that loads a lot of images, or classes over
https will do it forever - with 5 (!!!!!) sec overhead
on each. See Lotus iNotes over SSL as an example.

My application which is secure Java-based screen sharing
client becomes totally unusable with 1.4.0




REGRESSION. Last worked in version 1.3

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
1.https://fpl.uroam.com/bonus/testright.html
2.http://fpl.uroam.com/bonus/testright.html
3.Watch the delays, look at the Console trace at level 5

EXPECTED VERSUS ACTUAL BEHAVIOR :
Expect overhead on connect over https to be 10-20 msec
over a fast connection.

Observe 5 seconds instead.

I could tolerate the very first connect to be 5 sec,
but every one takes around 5 sec.


ERROR MESSAGES/STACK TRACES THAT OCCUR :
Here's the trace. *Every* subsequent connection goes through
the CA cert storage. I bet there's no SSL session maintained, too.

------
Starting applet...

Connecting https://fpl.uroam.com/bonus/data.php3 with no proxy

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading certificates from JPI session certificate store

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded certificates from JPI session certificate store

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy

Loading Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loaded Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\cacerts

Loading Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Https Root CA certificates file not found: C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loaded Https Root CA certificates from C:\PROGRA~1\Java\J2RE14~1.0
\lib\security\jssecacerts

Loading JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loaded JPI Https certificates from C:\Documents and
Settings\igor.UROAM\.java\jpihttpscerts140

Loading certificates from JPI session certificate store

Loaded certificates from JPI session certificate store

Connecting https://fpl.uroam.com/bonus/data.txt with no proxy



This bug can be reproduced always.

---------- BEGIN SOURCE ----------
http://fpl.uroam.com/bonus/test.zip
---------- END SOURCE ----------

CUSTOMER WORKAROUND :
no workaround.
(Review ID: 145970)
======================================================================