Integrated: 8315436: HttpsServer does not send TLS alerts

Daniel Jeliński djelinski at openjdk.org
Fri Sep 1 10:23:54 UTC 2023


On Thu, 31 Aug 2023 06:57:52 GMT, Daniel Jeliński <djelinski at openjdk.org> wrote:

> Please review this patch that ensures that alerts produced by `wrap` are sent to the peer.
> 
> When a fatal alert is produced by a `wrap` call, the returned status is `CLOSED`, but some bytes are produced in the destination buffer. These bytes need to be sent to the client.
> 
> The new test verifies this fix; without the fix the test fails with:
> 
> javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
> 
> With the fix the test passes; the exception thrown is :
> 
> javax.net.ssl.SSLHandshakeException: Received fatal alert: protocol_version
> 
> Existing tier1-3 tests continue to pass.

This pull request has now been integrated.

Changeset: 42f5b9e7
Author:    Daniel Jeliński <djelinski at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/42f5b9e7aacd69cad8b104ed49337cc64fc7ce7e
Stats:     112 lines in 2 files changed: 110 ins; 1 del; 1 mod

8315436: HttpsServer does not send TLS alerts

Reviewed-by: dfuchs, michaelm

-------------

PR: https://git.openjdk.org/jdk/pull/15505


More information about the net-dev mailing list