Integrated: 8315436: HttpsServer does not send TLS alerts
Daniel Jeliński
djelinski at openjdk.org
Fri Sep 1 10:23:54 UTC 2023
On Thu, 31 Aug 2023 06:57:52 GMT, Daniel Jeliński <djelinski at openjdk.org> wrote:
> Please review this patch that ensures that alerts produced by `wrap` are sent to the peer.
>
> When a fatal alert is produced by a `wrap` call, the returned status is `CLOSED`, but some bytes are produced in the destination buffer. These bytes need to be sent to the client.
>
> The new test verifies this fix; without the fix the test fails with:
>
> javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
>
> With the fix the test passes; the exception thrown is :
>
> javax.net.ssl.SSLHandshakeException: Received fatal alert: protocol_version
>
> Existing tier1-3 tests continue to pass.
This pull request has now been integrated.
Changeset: 42f5b9e7
Author: Daniel Jeliński <djelinski at openjdk.org>
URL: https://git.openjdk.org/jdk/commit/42f5b9e7aacd69cad8b104ed49337cc64fc7ce7e
Stats: 112 lines in 2 files changed: 110 ins; 1 del; 1 mod
8315436: HttpsServer does not send TLS alerts
Reviewed-by: dfuchs, michaelm
-------------
PR: https://git.openjdk.org/jdk/pull/15505
More information about the net-dev
mailing list