OpenJDK11u: Backward incompatible behavior

[Kumar Srinivasan]

Hi security-folk,

At VMware while upgrading our application to OpenJDK11u, we have encountered what seems to be a serious behavior issue.
The issue AFAICT seems to have stemmed from the work for TLS1.3 and JDK-8196584<https://bugs.openjdk.java.net/browse/JDK-8196584>.

Overview:
With OpenJDK11 the end-points are closed immediately with TLS alerts raised when an exception is received.
This is not the case with JDK8 the socket is not closed allowing retries.

I have filed: JDK-8239798 (with a reproducer), this issue was also reported  to Azul and they have filed: JDK-8239788.

Can you please evaluate this at the earliest, this is a serious show stopper for VMware.

Thank
Kumar Srinivasan
VMware
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20200221/58a51564/attachment.htm>