Details
-
Bug
-
Resolution: Fixed
-
P3
-
6u131, 7, 8, 11, 18
-
b12
-
Verified
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8272845 | 17.0.2 | Sean Coffey | P3 | Resolved | Fixed | b01 |
JDK-8273208 | 17.0.1 | Sean Coffey | P3 | Resolved | Fixed | b09 |
JDK-8296121 | 15.0.10 | Yuri Nesterenko | P3 | Resolved | Fixed | b02 |
JDK-8296123 | 13.0.14 | Yuri Nesterenko | P3 | Resolved | Fixed | b02 |
JDK-8273035 | 11.0.14-oracle | Sean Coffey | P3 | Resolved | Fixed | b01 |
JDK-8273990 | 11.0.14 | Martin Doerr | P3 | Resolved | Fixed | b01 |
JDK-8296464 | openjdk8u362 | Alexey Bakhtin | P3 | Resolved | Fixed | b03 |
JDK-8273252 | 8u321 | Sean Coffey | P3 | Resolved | Fixed | b01 |
JDK-8275741 | 7u331 | Sean Coffey | P3 | Resolved | Fixed | b03 |
Description
In a TLS session resumption scenario, the connection fails in following scenario if using JDK 7u/6u
Server started and configured to use TLSv1 only
Client started and sends ClientHello with TLSv1.2 request
Server responds with ServerHello using TLSv1
Connection succeeds and proceeds using TLSv1
Clients sleeps
Server restarted to use TLSv1.2 only.
Client attempts a session resumption
ClientHello contains TLSv1 protocol version request.
Server now rejects this request:
Exception in thread "main" javax.net.ssl.SSLHandshakeException: Client requested protocol TLSv1 not enabled or not supported
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1897)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:300)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:290)
at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:506)
at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:222)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1009)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:930)
Attachments
Issue Links
- backported by
-
JDK-8272845 Session resumption errors
-
- Resolved
-
-
JDK-8273035 Session resumption errors
-
- Resolved
-
-
JDK-8273208 Session resumption errors
-
- Resolved
-
-
JDK-8273252 Session resumption errors
-
- Resolved
-
-
JDK-8273990 Session resumption errors
-
- Resolved
-
-
JDK-8275741 Session resumption errors
-
- Resolved
-
-
JDK-8296121 Session resumption errors
-
- Resolved
-
-
JDK-8296123 Session resumption errors
-
- Resolved
-
-
JDK-8296464 Session resumption errors
-
- Resolved
-
- relates to
-
JDK-8272653 SSLSession not invalidated after failed TLS resumption attempt
-
- Open
-
- links to
-
Commit openjdk/jdk8u-dev/2cd66fb9
-
Commit openjdk/jdk11u-dev/9f51a400
-
Commit openjdk/jdk13u-dev/c0871a74
-
Commit openjdk/jdk15u-dev/7dd45191
-
Commit openjdk/jdk17u/20d00eba
-
Commit openjdk/jdk/04a806ec
-
Review openjdk/jdk8u-dev/151
-
Review openjdk/jdk11u-dev/370
-
Review openjdk/jdk13u-dev/422
-
Review openjdk/jdk15u-dev/296
-
Review openjdk/jdk17u/39
-
Review openjdk/jdk/5110