-
Bug
-
Resolution: Not an Issue
-
P3
-
None
-
11.0.8
Submitter testing migration plan of moving to JDK 11 from JDK 8u. Their TLS application workflow fails intermittently when server end point is running JDK 11
below message is seen often in debug logs on server end but wireshark analysis appears to show the client sending an alert close_notify before the server sends theirs (this is TLSv1.2 application)
Intermittent failure seen since JDK 9.
javax.net.ssl|ERROR|3C|NioProcessor-4|2020-08-13 13:13:16.772 MDT|TransportConte
xt.java:319|Fatal (INTERNAL_ERROR): closing inbound before receiving peer's close_notify (
"throwable" : {
javax.net.ssl.SSLException: closing inbound before receiving peer's close_notify
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:270)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:261)
at java.base/sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:737)
at org.apache.mina.filter.ssl.SslHandler.destroy(SslHandler.java:215)
at org.apache.mina.filter.ssl.SslFilter.messageReceived(SslFilter.java:527)
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:641)
One theory is that Mina is filtering messages coming from client
below message is seen often in debug logs on server end but wireshark analysis appears to show the client sending an alert close_notify before the server sends theirs (this is TLSv1.2 application)
Intermittent failure seen since JDK 9.
javax.net.ssl|ERROR|3C|NioProcessor-4|2020-08-13 13:13:16.772 MDT|TransportConte
xt.java:319|Fatal (INTERNAL_ERROR): closing inbound before receiving peer's close_notify (
"throwable" : {
javax.net.ssl.SSLException: closing inbound before receiving peer's close_notify
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:133)
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:270)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:261)
at java.base/sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:737)
at org.apache.mina.filter.ssl.SslHandler.destroy(SslHandler.java:215)
at org.apache.mina.filter.ssl.SslFilter.messageReceived(SslFilter.java:527)
at org.apache.mina.core.filterchain.DefaultIoFilterChain.callNextMessageReceived(DefaultIoFilterChain.java:641)
One theory is that Mina is filtering messages coming from client