<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thanks a lot… <div class=""><br class=""></div><div class="">Happy to be able to help here.</div><div class=""><br class=""></div><div class="">Once you have a fix ready let me know and I can verify it with the netty testsuite.</div><div class=""><br class=""></div><div class="">Bye</div><div class="">Norman</div><div class=""><br class=""></div><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 1. Apr 2020, at 23:37, Jamil Nimeh <<a href="mailto:jamil.j.nimeh@Oracle.Com" class="">jamil.j.nimeh@Oracle.Com</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">
<div class=""><p class="">Hi Norman, session context issue is here:</p><p class=""><a class="moz-txt-link-freetext" href="https://bugs.openjdk.java.net/browse/JDK-8242008">https://bugs.openjdk.java.net/browse/JDK-8242008</a></p><p class="">--Jamil<br class="">
</p>
<div class="moz-cite-prefix">On 4/1/2020 12:32 AM, Norman Maurer
wrote:<br class="">
</div>
<blockquote type="cite" cite="mid:8B48D9A2-D71C-44B3-B9B4-25F1436D1FE6@googlemail.com" class="">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">
Please add a link to the bug once it is created.
<div class=""><br class="">
</div>
<div class="">Bye</div>
<div class="">Norman</div>
<div class=""><br class="">
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On 31. Mar 2020, at 17:35, Jamil Nimeh <<a href="mailto:jamil.j.nimeh@Oracle.Com" class="" moz-do-not-send="true">jamil.j.nimeh@Oracle.Com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta http-equiv="Content-Type" content="text/html;
charset=UTF-8" class="">
<div class=""><p class="">Thanks Norman, I'm going to file a bug on
this one. After playing with it a bit more I found
cases where even SSLServerSockets do run into the
issue but it doesn't always happen. Still working on
characterizing it.</p><p class="">--Jamil<br class="">
</p>
<div class="moz-cite-prefix">On 3/31/2020 7:11 AM,
Norman Maurer wrote:<br class="">
</div>
<blockquote type="cite" cite="mid:DF08DC63-3056-4982-ADC1-029C9A5417E2@googlemail.com" class="">
<meta http-equiv="Content-Type" content="text/html;
charset=UTF-8" class="">
Yes thats about right… if setting to false it works as
expected.
<div class=""><br class="">
</div>
<div class="">
<div class=""><br class="">
</div>
<div class="">Bye</div>
<div class="">Norman</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On 31. Mar 2020, at 01:50, Jamil
Nimeh <<a href="mailto:jamil.j.nimeh@Oracle.Com" class="" moz-do-not-send="true">jamil.j.nimeh@Oracle.Com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">
<div class=""><p class="">Hi Norman,</p><p class="">I've been able to run your test
code and I can reproduce it.
Interestingly enough, it appears to happen
when
-Djdk.tls.server.enableSessionTicketExtension=true,
which is the default position. With
session tickets enabled, I would see the
issue in TLS 1.3 and 1.2 connections just
as you did. Setting the above property to
false however allowed me to make
successful connections. Would you mind
setting that property to false, just to
make sure you and I see the same thing?</p><p class="">I did go back and run
SSLServerSocket-based connections just to
see if the session ticket settings had any
impact on things, but they don't. I can
make connections to a socket based SSL
server regardless of the property value on
the server side.</p><p class="">Thanks,</p><p class="">--Jamil<br class="">
</p>
<div class="moz-cite-prefix">On 3/30/2020
5:31 AM, Norman Maurer wrote:<br class="">
</div>
<blockquote type="cite" cite="mid:41271A68-2A81-4E87-ACE3-6409C7D7DCEE@googlemail.com" class="">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">
Hey Sean,
<div class=""><br class="">
</div>
<div class="">There is not much to share
as its just a simple handshake :)</div>
<div class=""><br class="">
</div>
<div class="">Anyway here is a reproducer:</div>
<div class=""><br class="">
</div>
<div class=""><a href="https://github.com/normanmaurer/jdk_ssl_session_context_reproducer" class="" moz-do-not-send="true">https://github.com/normanmaurer/jdk_ssl_session_context_reproducer</a></div>
<div class=""><br class="">
</div>
<div class="">It basically does nothing
more then complete the handshake and
then calling
engine.getSession().getSessionContext()
which will return null on the server
side since JDK 14 (earlier versions
work).</div>
<div class="">I tested it with TLSv1.2 and
TLSv1.3 and both times it produced the
error on JDK 14.</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Bye</div>
<div class="">Norman</div>
<div class=""><br class="">
<div class="">
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On 30. Mar 2020, at
13:22, Seán Coffey <<a href="mailto:sean.coffey@oracle.com" class="" moz-do-not-send="true">sean.coffey@oracle.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Looks interesting
Norman. Do you want to share
some more details about the
peculiarities of this
handshake before considering a
fully fledged testcase ?<br class="">
<br class="">
regards,<br class="">
Sean.<br class="">
<br class="">
On 27/03/2020 12:48, Norman
Maurer wrote:<br class="">
<blockquote type="cite" class="">Hi there,<br class="">
<br class="">
I am just about to add JDK14
to the test matrix for netty
and think I found a
regression. Before I will
invest time to write a
standalone reproducer please
let me know if you think
this is a regression or not.<br class="">
Basically after the
handshake is complete
SSLEngine.getSession().getSessionContext()
returns null on the
serverside when using JDK14.
Running the same test with
any previous version (JDK13
and earlier) doesn’t show
the same result.<br class="">
<br class="">
Does this sounds like a
regression and if so should
I provide a standalone
reproducer here ?<br class="">
<br class="">
Bye<br class="">
Norman<br class="">
<br class="">
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
</div>
</div></blockquote></div><br class=""></div></body></html>