[undertow-dev] SSL Documentation

Stuart Douglas sdouglas at redhat.com
Mon Dec 12 16:42:33 EST 2016


Did this happen with every resource? I can't reproduce it on the
HTTP2Server example which is basically the same thing.

Stuart

On Tue, Dec 13, 2016 at 8:13 AM, Hicks, Matt <matt at matthicks.com> wrote:
> Jason, you rock!  Disabling HTTP/2 made it magically start working!  I have
> no idea why, but it seems to be consistently working now.
>
> Stuart, it's resources in the ResourceManager that are failing for me, so
> it's Undertow code that is supposed to be serving them up and handling the
> channels.
>
> On Mon, Dec 12, 2016 at 2:34 PM Jason Greene <jason.greene at redhat.com>
> wrote:
>>
>> Random thought. Earlier you ran into a problem with bad content lengths,
>> could you be hitting that again?
>>
>> If you disable HTTP/2 does it work for you?
>>
>> On Dec 12, 2016, at 2:27 PM, Hicks, Matt <matt at matthicks.com> wrote:
>>
>> Looking at AbstractFramedStreamSinkChannel:578 the exception is caused
>> because the channel is STATUS_CLOSED.
>>
>> On Mon, Dec 12, 2016 at 2:25 PM Hicks, Matt <matt at matthicks.com> wrote:
>>>
>>> Yes, the same code works in HTTP, but if you look at the trace it looks
>>> as though it's never even getting to my code.  I'm getting
>>> ERR_CONNECTION_RESET in the browser when I load the page with GET params but
>>> the page itself is loading.  Something really bizarre is happening here and
>>> the referenced resources aren't coming through properly.  The same exact
>>> resources though come through fine if I manually load them or if I do it
>>> from a URL without any query args.  I'm still digging into this, but it
>>> seems directly related to SSL.
>>>
>>> Stuart, can you make any sense of this?
>>>
>>>
>>>
>>> On Mon, Dec 12, 2016 at 1:24 PM Bill O'Neil <bill at dartalley.com> wrote:
>>>>
>>>> Does the same code work in HTTP? can you post a snippet of where you
>>>> read the query parameters?
>>>>
>>>> On Mon, Dec 12, 2016 at 1:13 PM, Hicks, Matt <matt at matthicks.com> wrote:
>>>>>
>>>>> Sorry guys, I need to resurrect this thread.
>>>>>
>>>>> SSL is working for the most part, but it seems when I try to load any
>>>>> URL that has GET args it starts throwing:
>>>>>
>>>>> siteJVM[ERROR] Dec 12, 2016 12:10:41 PM org.xnio.ChannelListeners
>>>>> invokeChannelListener
>>>>> siteJVM[ERROR] ERROR: XNIO001007: A channel event listener threw an
>>>>> exception
>>>>> siteJVM[ERROR] java.lang.IllegalStateException
>>>>> siteJVM[ERROR]  at
>>>>> io.undertow.server.protocol.framed.AbstractFramedStreamSinkChannel.getBuffer(AbstractFramedStreamSinkChannel.java:578)
>>>>> siteJVM[ERROR]  at
>>>>> io.undertow.server.protocol.framed.AbstractFramedChannel.flushSenders(AbstractFramedChannel.java:630)
>>>>> siteJVM[ERROR]  at
>>>>> io.undertow.server.protocol.framed.AbstractFramedChannel$FrameWriteListener.handleEvent(AbstractFramedChannel.java:943)
>>>>> siteJVM[ERROR]  at
>>>>> io.undertow.server.protocol.framed.AbstractFramedChannel$FrameWriteListener.handleEvent(AbstractFramedChannel.java:940)
>>>>> siteJVM[ERROR]  at
>>>>> org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
>>>>> siteJVM[ERROR]  at
>>>>> org.xnio.conduits.WriteReadyHandler$ChannelListenerHandler.writeReady(WriteReadyHandler.java:65)
>>>>> siteJVM[ERROR]  at
>>>>> io.undertow.protocols.ssl.SslConduit$SslWriteReadyHandler.writeReady(SslConduit.java:1224)
>>>>> siteJVM[ERROR]  at
>>>>> io.undertow.protocols.ssl.SslConduit$3.run(SslConduit.java:275)
>>>>> siteJVM[ERROR]  at
>>>>> org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:580)
>>>>> siteJVM[ERROR]  at org.xnio.nio.WorkerThread.run(WorkerThread.java:464)
>>>>>
>>>>> All over the place.  It also throws XNIO000011 sometimes as well. If I
>>>>> load the exact same URL with no GET args it seems to load just fine. Any
>>>>> idea why this might be happening?
>>>>>
>>>>> On Mon, Dec 12, 2016 at 11:01 AM Hicks, Matt <matt at matthicks.com>
>>>>> wrote:
>>>>>>
>>>>>> Stuart, I apologize for not figuring that out myself, but that was the
>>>>>> problem.  It's working correctly now.
>>>>>>
>>>>>> Ideally Undertow should be able to detect this internally and throw an
>>>>>> error instead of just silently failing.  I understand that this relies on
>>>>>> the SSLContext which is not part of Undertow's code, but it seems like if
>>>>>> there is any way to detect this scenario it would be a major convenience to
>>>>>> avoid such pitfalls for other developers in the future.
>>>>>>
>>>>>> Thanks everyone for your help with this.  I greatly appreciate it.
>>>>>>
>>>>>> On Sun, Dec 11, 2016 at 6:48 PM Stuart Douglas <sdouglas at redhat.com>
>>>>>> wrote:
>>>>>>>
>>>>>>> I have modified the example so it will now blow up if the keystore
>>>>>>> cannot be loaded:
>>>>>>>
>>>>>>> https://github.com/undertow-io/undertow/commit/d142748f138bb7416b8f5ff003f03c4af746678b
>>>>>>>
>>>>>>> Stuart
>>>>>>>
>>>>>>> On Sun, Dec 11, 2016 at 10:44 AM, Stuart Douglas
>>>>>>> <sdouglas at redhat.com> wrote:
>>>>>>>>
>>>>>>>> I also failed to run the example, until I realized that the code
>>>>>>>> does not validate that the keystore is loaded correctly (passing 'null' into
>>>>>>>> KeyStore.load apparently works without error).
>>>>>>>>
>>>>>>>> Are you sure you are actually loading the keystore correctly (maybe
>>>>>>>> add a null check into the loading code)?
>>>>>>>>
>>>>>>>> Stuart
>>>>>>>>
>>>>>>>> On Sun, Dec 11, 2016 at 3:05 AM, Bill O'Neil <bill at dartalley.com>
>>>>>>>> wrote:
>>>>>>>>>
>>>>>>>>> Here is the trace occurs with Http2 true and false. Issue seems to
>>>>>>>>> be javax.net.ssl.SSLException: Inbound closed before receiving peer's
>>>>>>>>> close_notify: possible truncation attack?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> 2016-12-10 11:03:03.669 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.670 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected key sun.nio.ch.SelectionKeyImpl at 611889f4 for
>>>>>>>>> sun.nio.ch.ServerSocketChannelImpl[/127.0.0.1:8443]
>>>>>>>>> 2016-12-10 11:03:03.670 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>> 2016-12-10 11:03:03.670 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.670 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task org.xnio.nio.QueuedNioTcpServer$1 at 52c85f64
>>>>>>>>> 2016-12-10 11:03:03.670 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.671 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener Delegating channel listener -> Accepting listener for
>>>>>>>>> io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5 on channel TCP
>>>>>>>>> server (NIO) <13f5555f>
>>>>>>>>> 2016-12-10 11:03:03.671 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected key sun.nio.ch.SelectionKeyImpl at 611889f4 for
>>>>>>>>> sun.nio.ch.ServerSocketChannelImpl[/127.0.0.1:8443]
>>>>>>>>> 2016-12-10 11:03:03.671 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener Accepting listener for
>>>>>>>>> io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5 on channel
>>>>>>>>> io.undertow.protocols.ssl.UndertowAcceptingSslChannel at 328f1eb6
>>>>>>>>> 2016-12-10 11:03:03.671 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.674 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5
>>>>>>>>> on channel io.undertow.protocols.ssl.UndertowSslConnection at 53f69e92
>>>>>>>>> 2016-12-10 11:03:03.675 [XNIO-1 I/O-2] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 49c6180b
>>>>>>>>> 2016-12-10 11:03:03.675 [XNIO-1 I/O-4] TRACE io.undertow.request -
>>>>>>>>> Opened connection with /127.0.0.1:56854
>>>>>>>>> 2016-12-10 11:03:03.676 [XNIO-1 I/O-2] TRACE org.xnio.nio - Running
>>>>>>>>> task org.xnio.nio.QueuedNioTcpServer$1 at 52c85f64
>>>>>>>>> 2016-12-10 11:03:03.681 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 5c0faa95 (with timeout)
>>>>>>>>> 2016-12-10 11:03:03.681 [XNIO-1 I/O-2] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener Delegating channel listener -> Accepting listener for
>>>>>>>>> io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5 on channel TCP
>>>>>>>>> server (NIO) <13f5555f>
>>>>>>>>> 2016-12-10 11:03:03.683 [XNIO-1 I/O-2] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener Accepting listener for
>>>>>>>>> io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5 on channel
>>>>>>>>> io.undertow.protocols.ssl.UndertowAcceptingSslChannel at 328f1eb6
>>>>>>>>> 2016-12-10 11:03:03.685 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>> 2016-12-10 11:03:03.688 [XNIO-1 I/O-2] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5
>>>>>>>>> on channel io.undertow.protocols.ssl.UndertowSslConnection at 3ac7f450
>>>>>>>>> 2016-12-10 11:03:03.688 [XNIO-1 I/O-2] TRACE io.undertow.request -
>>>>>>>>> Opened connection with /127.0.0.1:56856
>>>>>>>>> 2016-12-10 11:03:03.690 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected key sun.nio.ch.SelectionKeyImpl at 673b2384 for
>>>>>>>>> java.nio.channels.SocketChannel[connected local=/127.0.0.1:8443
>>>>>>>>> remote=/127.0.0.1:56854]
>>>>>>>>> 2016-12-10 11:03:03.691 [XNIO-1 I/O-2] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 49c6180b (with timeout)
>>>>>>>>> 2016-12-10 11:03:03.692 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpReadListener at 255c6481
>>>>>>>>> on channel org.xnio.conduits.ConduitStreamSourceChannel at 1b4554ad
>>>>>>>>> 2016-12-10 11:03:03.692 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 5c0faa95 (with timeout)
>>>>>>>>> 2016-12-10 11:03:03.696 [XNIO-1 I/O-2] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 49c6180b
>>>>>>>>> 2016-12-10 11:03:03.696 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>> 2016-12-10 11:03:03.696 [XNIO-1 I/O-2] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$5$1 at 32b59207
>>>>>>>>> 2016-12-10 11:03:03.696 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$5$1 at 7c204b59
>>>>>>>>> 2016-12-10 11:03:03.696 [XNIO-1 I/O-2] TRACE io.undertow.request.io
>>>>>>>>> - Exception closing read side of SSL channel
>>>>>>>>> javax.net.ssl.SSLException: Inbound closed before receiving peer's
>>>>>>>>> close_notify: possible truncation attack?
>>>>>>>>> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
>>>>>>>>> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
>>>>>>>>> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
>>>>>>>>> at
>>>>>>>>> sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1561)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.notifyReadClosed(SslConduit.java:612)
>>>>>>>>> at io.undertow.protocols.ssl.SslConduit.closed(SslConduit.java:983)
>>>>>>>>> at io.undertow.protocols.ssl.SslConduit.close(SslConduit.java:1078)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doUnwrap(SslConduit.java:799)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doHandshake(SslConduit.java:645)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.access$900(SslConduit.java:63)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit$5$1.run(SslConduit.java:1045)
>>>>>>>>> at org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:580)
>>>>>>>>> at org.xnio.nio.WorkerThread.run(WorkerThread.java:464)
>>>>>>>>> 2016-12-10 11:03:03.697 [XNIO-1 I/O-4] TRACE io.undertow.request.io
>>>>>>>>> - Exception closing read side of SSL channel
>>>>>>>>> javax.net.ssl.SSLException: Inbound closed before receiving peer's
>>>>>>>>> close_notify: possible truncation attack?
>>>>>>>>> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
>>>>>>>>> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
>>>>>>>>> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
>>>>>>>>> at
>>>>>>>>> sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1561)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.notifyReadClosed(SslConduit.java:612)
>>>>>>>>> at io.undertow.protocols.ssl.SslConduit.closed(SslConduit.java:983)
>>>>>>>>> at io.undertow.protocols.ssl.SslConduit.close(SslConduit.java:1078)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doUnwrap(SslConduit.java:799)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doHandshake(SslConduit.java:645)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.access$900(SslConduit.java:63)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit$5$1.run(SslConduit.java:1045)
>>>>>>>>> at org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:580)
>>>>>>>>> at org.xnio.nio.WorkerThread.run(WorkerThread.java:464)
>>>>>>>>> 2016-12-10 11:03:03.697 [XNIO-1 I/O-2] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener
>>>>>>>>> io.undertow.server.AbstractServerConnection$CloseSetter at 55df2063 on channel
>>>>>>>>> io.undertow.protocols.ssl.UndertowSslConnection at 3ac7f450
>>>>>>>>> 2016-12-10 11:03:03.698 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener
>>>>>>>>> io.undertow.server.AbstractServerConnection$CloseSetter at 42277317 on channel
>>>>>>>>> io.undertow.protocols.ssl.UndertowSslConnection at 53f69e92
>>>>>>>>> 2016-12-10 11:03:03.698 [XNIO-1 I/O-2] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource org.xnio.nio.NioSocketStreamConnection at 50bf3bfc
>>>>>>>>> 2016-12-10 11:03:03.698 [XNIO-1 I/O-4] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource org.xnio.nio.NioSocketStreamConnection at 4196fbe
>>>>>>>>> 2016-12-10 11:03:03.698 [XNIO-1 I/O-2] TRACE org.xnio.nio -
>>>>>>>>> Cancelling key sun.nio.ch.SelectionKeyImpl at 4805f11b of
>>>>>>>>> java.nio.channels.SocketChannel[connected local=/127.0.0.1:8443
>>>>>>>>> remote=/127.0.0.1:56856] (same thread)
>>>>>>>>> 2016-12-10 11:03:03.698 [XNIO-1 I/O-4] TRACE org.xnio.nio -
>>>>>>>>> Cancelling key sun.nio.ch.SelectionKeyImpl at 673b2384 of
>>>>>>>>> java.nio.channels.SocketChannel[connected local=/127.0.0.1:8443
>>>>>>>>> remote=/127.0.0.1:56854] (same thread)
>>>>>>>>> 2016-12-10 11:03:03.699 [XNIO-1 I/O-2] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource io.undertow.protocols.ssl.UndertowSslConnection at 3ac7f450
>>>>>>>>> 2016-12-10 11:03:03.699 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.699 [XNIO-1 I/O-4] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource io.undertow.protocols.ssl.UndertowSslConnection at 53f69e92
>>>>>>>>> 2016-12-10 11:03:03.699 [XNIO-1 Accept] TRACE org.xnio.nio -
>>>>>>>>> Running task org.xnio.nio.QueuedNioTcpServer$2 at 1ce2a083
>>>>>>>>> 2016-12-10 11:03:03.699 [XNIO-1 I/O-2] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$1 at 77593ca5
>>>>>>>>> 2016-12-10 11:03:03.700 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$1 at 3548b3ac
>>>>>>>>> 2016-12-10 11:03:03.700 [XNIO-1 Accept] TRACE org.xnio.nio -
>>>>>>>>> Running task org.xnio.nio.QueuedNioTcpServer$2 at 1ce2a083
>>>>>>>>> 2016-12-10 11:03:03.700 [XNIO-1 I/O-2] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpReadListener at 6962bde3
>>>>>>>>> on channel org.xnio.conduits.ConduitStreamSourceChannel at 45125494
>>>>>>>>> 2016-12-10 11:03:03.700 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpReadListener at 255c6481
>>>>>>>>> on channel org.xnio.conduits.ConduitStreamSourceChannel at 1b4554ad
>>>>>>>>> 2016-12-10 11:03:03.700 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.701 [XNIO-1 I/O-2] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource
>>>>>>>>> io.undertow.server.protocol.http.HttpServerConnection at 6cdbf711
>>>>>>>>> 2016-12-10 11:03:03.701 [XNIO-1 I/O-4] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource
>>>>>>>>> io.undertow.server.protocol.http.HttpServerConnection at 4bcc5cdf
>>>>>>>>> 2016-12-10 11:03:03.701 [XNIO-1 I/O-2] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$2 at 52d9523b
>>>>>>>>> 2016-12-10 11:03:03.702 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$2 at 320a217a
>>>>>>>>> 2016-12-10 11:03:03.702 [XNIO-1 I/O-2] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 49c6180b
>>>>>>>>> 2016-12-10 11:03:03.702 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>> 2016-12-10 11:03:03.714 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.715 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected key sun.nio.ch.SelectionKeyImpl at 611889f4 for
>>>>>>>>> sun.nio.ch.ServerSocketChannelImpl[/127.0.0.1:8443]
>>>>>>>>> 2016-12-10 11:03:03.716 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.717 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>> 2016-12-10 11:03:03.718 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task org.xnio.nio.QueuedNioTcpServer$1 at 52c85f64
>>>>>>>>> 2016-12-10 11:03:03.719 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener Delegating channel listener -> Accepting listener for
>>>>>>>>> io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5 on channel TCP
>>>>>>>>> server (NIO) <13f5555f>
>>>>>>>>> 2016-12-10 11:03:03.719 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener Accepting listener for
>>>>>>>>> io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5 on channel
>>>>>>>>> io.undertow.protocols.ssl.UndertowAcceptingSslChannel at 328f1eb6
>>>>>>>>> 2016-12-10 11:03:03.721 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpOpenListener at 56f7c1e5
>>>>>>>>> on channel io.undertow.protocols.ssl.UndertowSslConnection at d84c5d1
>>>>>>>>> 2016-12-10 11:03:03.721 [XNIO-1 I/O-4] TRACE io.undertow.request -
>>>>>>>>> Opened connection with /127.0.0.1:56858
>>>>>>>>> 2016-12-10 11:03:03.724 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 5c0faa95 (with timeout)
>>>>>>>>> 2016-12-10 11:03:03.728 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>> 2016-12-10 11:03:03.728 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$5$1 at 47e5be01
>>>>>>>>> 2016-12-10 11:03:03.729 [XNIO-1 I/O-4] TRACE io.undertow.request.io
>>>>>>>>> - Exception closing read side of SSL channel
>>>>>>>>> javax.net.ssl.SSLException: Inbound closed before receiving peer's
>>>>>>>>> close_notify: possible truncation attack?
>>>>>>>>> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
>>>>>>>>> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)
>>>>>>>>> at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)
>>>>>>>>> at
>>>>>>>>> sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1561)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.notifyReadClosed(SslConduit.java:612)
>>>>>>>>> at io.undertow.protocols.ssl.SslConduit.closed(SslConduit.java:983)
>>>>>>>>> at io.undertow.protocols.ssl.SslConduit.close(SslConduit.java:1078)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doUnwrap(SslConduit.java:799)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doHandshake(SslConduit.java:645)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit.access$900(SslConduit.java:63)
>>>>>>>>> at
>>>>>>>>> io.undertow.protocols.ssl.SslConduit$5$1.run(SslConduit.java:1045)
>>>>>>>>> at org.xnio.nio.WorkerThread.safeRun(WorkerThread.java:580)
>>>>>>>>> at org.xnio.nio.WorkerThread.run(WorkerThread.java:464)
>>>>>>>>> 2016-12-10 11:03:03.729 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener
>>>>>>>>> io.undertow.server.AbstractServerConnection$CloseSetter at 3457fbeb on channel
>>>>>>>>> io.undertow.protocols.ssl.UndertowSslConnection at d84c5d1
>>>>>>>>> 2016-12-10 11:03:03.729 [XNIO-1 I/O-4] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource org.xnio.nio.NioSocketStreamConnection at 1fd60afd
>>>>>>>>> 2016-12-10 11:03:03.729 [XNIO-1 I/O-4] TRACE org.xnio.nio -
>>>>>>>>> Cancelling key sun.nio.ch.SelectionKeyImpl at 7da1dc1a of
>>>>>>>>> java.nio.channels.SocketChannel[connected local=/127.0.0.1:8443
>>>>>>>>> remote=/127.0.0.1:56858] (same thread)
>>>>>>>>> 2016-12-10 11:03:03.730 [XNIO-1 I/O-4] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource io.undertow.protocols.ssl.UndertowSslConnection at d84c5d1
>>>>>>>>> 2016-12-10 11:03:03.730 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Selected on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.730 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$1 at 11f5487
>>>>>>>>> 2016-12-10 11:03:03.730 [XNIO-1 Accept] TRACE org.xnio.nio -
>>>>>>>>> Running task org.xnio.nio.QueuedNioTcpServer$2 at 1ce2a083
>>>>>>>>> 2016-12-10 11:03:03.730 [XNIO-1 I/O-4] TRACE org.xnio.listener -
>>>>>>>>> Invoking listener io.undertow.server.protocol.http.HttpReadListener at 6b60e713
>>>>>>>>> on channel org.xnio.conduits.ConduitStreamSourceChannel at 60e3d137
>>>>>>>>> 2016-12-10 11:03:03.731 [XNIO-1 Accept] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 342f8479
>>>>>>>>> 2016-12-10 11:03:03.731 [XNIO-1 I/O-4] TRACE org.xnio.safe-close -
>>>>>>>>> Closing resource
>>>>>>>>> io.undertow.server.protocol.http.HttpServerConnection at 4f4dae34
>>>>>>>>> 2016-12-10 11:03:03.732 [XNIO-1 I/O-4] TRACE org.xnio.nio - Running
>>>>>>>>> task io.undertow.protocols.ssl.SslConduit$2 at 348d6036
>>>>>>>>> 2016-12-10 11:03:03.732 [XNIO-1 I/O-4] TRACE org.xnio.nio.selector
>>>>>>>>> - Beginning select on sun.nio.ch.KQueueSelectorImpl at 5c0faa95
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Sat, Dec 10, 2016 at 10:58 AM, Hicks, Matt <matt at matthicks.com>
>>>>>>>>> wrote:
>>>>>>>>>>
>>>>>>>>>> Thanks Bill....I don't feel as crazy now. ;)
>>>>>>>>>>
>>>>>>>>>> On Sat, Dec 10, 2016 at 9:51 AM Bill O'Neil <bill at dartalley.com>
>>>>>>>>>> wrote:
>>>>>>>>>>>
>>>>>>>>>>> Oops I forgot https://localhost:8443. Now it is giving me
>>>>>>>>>>> localhost unexpectedly closed the connection. With no errors. I also don't
>>>>>>>>>>> have a cert set up but I would think that should throw an error?
>>>>>>>>>>>
>>>>>>>>>>> The on startup JDK9 issue is still there.
>>>>>>>>>>>
>>>>>>>>>>> On Sat, Dec 10, 2016 at 10:45 AM, Bill O'Neil
>>>>>>>>>>> <bill at dartalley.com> wrote:
>>>>>>>>>>>>
>>>>>>>>>>>> Matt did you try turning on logging? Here are the two errors I
>>>>>>>>>>>> get. Stuart maybe you can help from this I don't know much about SSL.
>>>>>>>>>>>>
>>>>>>>>>>>> This error is on server start. I'm running JDK 8.
>>>>>>>>>>>>
>>>>>>>>>>>> java.lang.NoSuchMethodException:
>>>>>>>>>>>> javax.net.ssl.SSLParameters.setApplicationProtocols([Ljava.lang.String;)
>>>>>>>>>>>> at java.lang.Class.getMethod(Class.java:1786)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.alpn.JDK9AlpnProvider$1.run(JDK9AlpnProvider.java:47)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.alpn.JDK9AlpnProvider$1.run(JDK9AlpnProvider.java:43)
>>>>>>>>>>>> at java.security.AccessController.doPrivileged(Native Method)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.alpn.JDK9AlpnProvider.<clinit>(JDK9AlpnProvider.java:43)
>>>>>>>>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
>>>>>>>>>>>> Method)
>>>>>>>>>>>> at
>>>>>>>>>>>> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
>>>>>>>>>>>> at
>>>>>>>>>>>> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
>>>>>>>>>>>> at
>>>>>>>>>>>> java.lang.reflect.Constructor.newInstance(Constructor.java:422)
>>>>>>>>>>>> at java.lang.Class.newInstance(Class.java:442)
>>>>>>>>>>>> at
>>>>>>>>>>>> java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:380)
>>>>>>>>>>>> at
>>>>>>>>>>>> java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404)
>>>>>>>>>>>> at java.util.ServiceLoader$1.next(ServiceLoader.java:480)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.alpn.ALPNManager.<init>(ALPNManager.java:40)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.alpn.ALPNManager.<clinit>(ALPNManager.java:35)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.server.protocol.http.AlpnOpenListener.<init>(AlpnOpenListener.java:67)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.server.protocol.http.AlpnOpenListener.<init>(AlpnOpenListener.java:90)
>>>>>>>>>>>> at io.undertow.Undertow.start(Undertow.java:177)
>>>>>>>>>>>> at com.dartalley.function.Http2Server.main(Http2Server.java:70)
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> The following errors happen on request to the localhost:8443
>>>>>>>>>>>> from Matt's code which leads to an empty response.
>>>>>>>>>>>>
>>>>>>>>>>>> 10:42:29.083 [XNIO-1 I/O-2] DEBUG io.undertow.request.io -
>>>>>>>>>>>> UT005013: An IOException occurred
>>>>>>>>>>>> javax.net.ssl.SSLHandshakeException: UT000140: Initial SSL/TLS
>>>>>>>>>>>> data is not a handshake record
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.ssl.ALPNHackClientHelloExplorer.exploreClientHello(ALPNHackClientHelloExplorer.java:84)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.ssl.ALPNHackSSLEngine.unwrap(ALPNHackSSLEngine.java:205)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.ssl.SslConduit.doUnwrap(SslConduit.java:729)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.protocols.ssl.SslConduit.read(SslConduit.java:567)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:127)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.server.protocol.http.AlpnOpenListener$AlpnConnectionListener.handleEvent(AlpnOpenListener.java:280)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.server.protocol.http.AlpnOpenListener.handleEvent(AlpnOpenListener.java:249)
>>>>>>>>>>>> at
>>>>>>>>>>>> io.undertow.server.protocol.http.AlpnOpenListener.handleEvent(AlpnOpenListener.java:60)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.ChannelListeners$10.handleEvent(ChannelListeners.java:291)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.ChannelListeners$10.handleEvent(ChannelListeners.java:286)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.ChannelListeners$DelegatingChannelListener.handleEvent(ChannelListeners.java:1092)
>>>>>>>>>>>> at
>>>>>>>>>>>> org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
>
>
> _______________________________________________
> undertow-dev mailing list
> undertow-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev


More information about the undertow-dev mailing list