hg: jdk9/dev/jdk: 8133632: javax.net.ssl.SSLEngine does not properly handle received SSL fatal alerts
jamil.j.nimeh at oracle.com
jamil.j.nimeh at oracle.com
Thu Nov 3 22:18:34 UTC 2016
Changeset: 40620d84d55d
Author: jnimeh
Date: 2016-11-03 15:18 -0700
URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/40620d84d55d
8133632: javax.net.ssl.SSLEngine does not properly handle received SSL fatal alerts
Summary: Upon receiving a fatal alert, make sure the input and output queues are closed and the engine is in the NOT_HANDSHAKING state.
Reviewed-by: xuelei
! src/java.base/share/classes/sun/security/ssl/SSLEngineImpl.java
+ test/javax/net/ssl/SSLEngine/EngineCloseOnAlert.java
More information about the jdk9-dev-changes
mailing list