RFR: 8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368
Rajan Halade
rhalade at openjdk.java.net
Tue Mar 22 16:36:35 UTC 2022
On Sat, 12 Mar 2022 00:55:07 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:
> JDK-8253368 changed the behavior of SSLSocket to no longer throw a fatal internal_error (80) and invalidate existing sessions (either completed or under construction) as described in (RFC 4346/TLSv1.1+) if a connection was closed without receiving a close_notify alert from the peer.
>
> This change introduces similar behavior to SSLEngine.
>
> The unit test checks that closing the read(input) sides of the SSLSocket/SSLEngine throws an SSLException, but doesn't invalidate their respective sessions.
>
> Tier1/2 mach5 tests have been successfully run.
Marked as reviewed by rhalade (Reviewer).
-------------
PR: https://git.openjdk.java.net/jdk/pull/7796
More information about the security-dev
mailing list