RFR: 8253368: TLS connection always receives close_notify exception
Xue-Lei Andrew Fan
xuelei at openjdk.java.net
Tue Dec 22 16:37:03 UTC 2020
On Tue, 22 Dec 2020 15:40:12 GMT, Sean Coffey <coffeys at openjdk.org> wrote:
> @XueleiFan I went ahead with your advice and chose to keep the check in the code. Since JDK 11, this code path would have thrown an SSLException. I've chosen to keep that instead of introduce another Exception(UnsupportedOperationException) -- which would be new for some application stacks. I've looked at the apache core-http stack and know that it catches and ignores SSLException in these cases.
>
> The important change here is that the exception is not fatal and the session remains valid. Socket is closed out in a finally block. test case updated also.
OK. Thanks for the update.
-------------
PR: https://git.openjdk.java.net/jdk/pull/1205
More information about the security-dev
mailing list