[jboss-jira] [JBoss JIRA] (LOGMGR-200) SSLProtocolException: Connection reset on JDK11

James Perkins (JIRA) issues at jboss.org
Thu Aug 9 16:08:00 EDT 2018


    [ https://issues.jboss.org/browse/LOGMGR-200?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13617290#comment-13617290 ] 

James Perkins commented on LOGMGR-200:
--------------------------------------

Turning on debug logging has turned this up as well:
{code}
javax.net.ssl|DEBUG|01|main|2018-08-09 12:55:33.773 PDT|SSLExtensions.java:148|Ignore unavailable extension: server_name
javax.net.ssl|DEBUG|01|main|2018-08-09 12:55:33.773 PDT|SSLExtensions.java:148|Ignore unavailable extension: max_fragment_length
javax.net.ssl|DEBUG|01|main|2018-08-09 12:55:33.773 PDT|SSLExtensions.java:167|Consumed extension: supported_groups
javax.net.ssl|DEBUG|01|main|2018-08-09 12:55:33.773 PDT|SSLExtensions.java:182|Ignore unavailable extension: server_name
javax.net.ssl|DEBUG|01|main|2018-08-09 12:55:33.774 PDT|SSLExtensions.java:182|Ignore unavailable extension: max_fragment_length
javax.net.ssl|WARNING|01|main|2018-08-09 12:55:33.774 PDT|SSLExtensions.java:190|Ignore impact of unsupported extension: supported_groups
javax.net.ssl|DEBUG|01|main|2018-08-09 12:55:33.774 PDT|SSLExtensions.java:182|Ignore unavailable extension: application_layer_protocol_negotiation
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.775 PDT|X509Authentication.java:241|No X.509 cert selected for EC
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.775 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: ecdsa_secp256r1_sha256
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.775 PDT|X509Authentication.java:241|No X.509 cert selected for EC
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.775 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: ecdsa_secp384r1_sha384
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.775 PDT|X509Authentication.java:241|No X.509 cert selected for EC
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.776 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: ecdsa_secp512r1_sha512
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.776 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.776 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pss_rsae_sha256
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.776 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.776 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pss_rsae_sha384
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.777 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.777 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pss_rsae_sha512
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.777 PDT|X509Authentication.java:241|No X.509 cert selected for RSASSA-PSS
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.777 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pss_pss_sha256
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.777 PDT|X509Authentication.java:241|No X.509 cert selected for RSASSA-PSS
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.777 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pss_pss_sha384
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.778 PDT|X509Authentication.java:241|No X.509 cert selected for RSASSA-PSS
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.778 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pss_pss_sha512
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.778 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.778 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pkcs1_sha256
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.778 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.779 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pkcs1_sha384
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.779 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.779 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pkcs1_sha512
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.779 PDT|X509Authentication.java:241|No X.509 cert selected for EC
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.779 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: ecdsa_sha1
javax.net.ssl|ALL|0F|Thread-0|2018-08-09 12:55:33.780 PDT|X509Authentication.java:241|No X.509 cert selected for RSA
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.780 PDT|CertificateMessage.java:1059|Unavailable authentication scheme: rsa_pkcs1_sha1
javax.net.ssl|WARNING|0F|Thread-0|2018-08-09 12:55:33.780 PDT|CertificateMessage.java:1069|No available authentication scheme
javax.net.ssl|ERROR|0F|Thread-0|2018-08-09 12:55:33.782 PDT|TransportContext.java:317|Fatal (HANDSHAKE_FAILURE): No available authentication scheme (
"throwable" : {
  javax.net.ssl.SSLHandshakeException: No available authentication scheme
    at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)
    at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
    at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:312)
    at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:268)
    at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259)
    at java.base/sun.security.ssl.CertificateMessage$T13CertificateProducer.onProduceCertificate(CertificateMessage.java:945)
    at java.base/sun.security.ssl.CertificateMessage$T13CertificateProducer.produce(CertificateMessage.java:934)
    at java.base/sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:429)
    at java.base/sun.security.ssl.ClientHello$T13ClientHelloConsumer.goServerHello(ClientHello.java:1189)
    at java.base/sun.security.ssl.ClientHello$T13ClientHelloConsumer.consume(ClientHello.java:1125)
    at java.base/sun.security.ssl.ClientHello$ClientHelloConsumer.onClientHello(ClientHello.java:831)
    at java.base/sun.security.ssl.ClientHello$ClientHelloConsumer.consume(ClientHello.java:792)
    at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:390)
    at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:445)
    at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)
    at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178)
    at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
    at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:877)
    at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:810)
    at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:383)
    at java.base/sun.security.ssl.SSLSocketImpl.ensureNegotiated(SSLSocketImpl.java:477)
    at java.base/sun.security.ssl.SSLSocketImpl$AppInputStream.read(SSLSocketImpl.java:558)
    at java.base/java.io.InputStream.read(InputStream.java:205)
    at org.jboss.logmanager.handlers.SimpleServer$TcpServer.run(SimpleServer.java:121)
    at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
    at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
    at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
    at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
    at java.base/java.lang.Thread.run(Thread.java:834)}

)
{code}

> SSLProtocolException: Connection reset on JDK11
> -----------------------------------------------
>
>                 Key: LOGMGR-200
>                 URL: https://issues.jboss.org/browse/LOGMGR-200
>             Project: JBoss Log Manager
>          Issue Type: Bug
>    Affects Versions: 2.1.4.Final
>            Reporter: Jan Kalina
>            Priority: Blocker
>
> testTlsConnection and other SSL related tests in SocketHandlerTests fails on JDK11:
> {code}
> LogManager error of type FLUSH_FAILURE: Error on flush
> javax.net.ssl.SSLProtocolException: Connection reset
> 	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:126)
> 	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:325)
> 	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:268)
> 	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)
> 	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:137)
> 	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:877)
> 	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:810)
> 	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:383)
> 	at java.base/sun.security.ssl.SSLSocketImpl.ensureNegotiated(SSLSocketImpl.java:477)
> 	at java.base/sun.security.ssl.SSLSocketImpl$AppOutputStream.write(SSLSocketImpl.java:709)
> 	at org.jboss.logmanager.handlers.TcpOutputStream.write(TcpOutputStream.java:188)
> 	at org.jboss.logmanager.handlers.UninterruptibleOutputStream.write(UninterruptibleOutputStream.java:84)
> 	at java.base/sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:233)
> 	at java.base/sun.nio.cs.StreamEncoder.implFlushBuffer(StreamEncoder.java:312)
> 	at java.base/sun.nio.cs.StreamEncoder.implFlush(StreamEncoder.java:316)
> 	at java.base/sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:153)
> 	at java.base/java.io.OutputStreamWriter.flush(OutputStreamWriter.java:254)
> 	at org.jboss.logmanager.handlers.SocketHandler.safeFlush(SocketHandler.java:512)
> 	at org.jboss.logmanager.handlers.SocketHandler.flush(SocketHandler.java:228)
> 	at org.jboss.logmanager.ExtHandler.doPublish(ExtHandler.java:105)
> 	at org.jboss.logmanager.handlers.SocketHandler.doPublish(SocketHandler.java:218)
> 	at org.jboss.logmanager.handlers.SocketHandlerTests.testTlsConnection(SocketHandlerTests.java:59)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> 	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> 	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:50)
> 	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
> 	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47)
> 	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
> 	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
> 	at org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:27)
> 	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:325)
> 	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:78)
> 	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:57)
> 	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290)
> 	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71)
> 	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288)
> 	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58)
> 	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268)
> 	at org.junit.runners.ParentRunner.run(ParentRunner.java:363)
> 	at org.junit.runner.JUnitCore.run(JUnitCore.java:137)
> 	at com.intellij.junit4.JUnit4IdeaTestRunner.startRunnerWithArgs(JUnit4IdeaTestRunner.java:68)
> 	at com.intellij.rt.execution.junit.IdeaTestRunner$Repeater.startRunnerWithArgs(IdeaTestRunner.java:47)
> 	at com.intellij.rt.execution.junit.JUnitStarter.prepareStreamsAndStart(JUnitStarter.java:242)
> 	at com.intellij.rt.execution.junit.JUnitStarter.main(JUnitStarter.java:70)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> 	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> 	at com.intellij.rt.execution.application.AppMainV2.main(AppMainV2.java:131)
> Caused by: java.net.SocketException: Connection reset
> 	at java.base/java.net.SocketInputStream.read(SocketInputStream.java:186)
> 	at java.base/java.net.SocketInputStream.read(SocketInputStream.java:140)
> 	at java.base/sun.security.ssl.SSLSocketInputRecord.read(SSLSocketInputRecord.java:464)
> 	at java.base/sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:167)
> 	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:108)
> 	... 46 more
> java.lang.AssertionError
> 	at org.junit.Assert.fail(Assert.java:86)
> 	at org.junit.Assert.assertTrue(Assert.java:41)
> 	at org.junit.Assert.assertNotNull(Assert.java:712)
> 	at org.junit.Assert.assertNotNull(Assert.java:722)
> 	at org.jboss.logmanager.handlers.SocketHandlerTests.testTlsConnection(SocketHandlerTests.java:61)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> 	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> 	at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:50)
> 	at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12)
> 	at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:47)
> 	at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17)
> 	at org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26)
> 	at org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:27)
> 	at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:325)
> 	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:78)
> 	at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:57)
> 	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290)
> 	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71)
> 	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288)
> 	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58)
> 	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268)
> 	at org.junit.runners.ParentRunner.run(ParentRunner.java:363)
> 	at org.junit.runner.JUnitCore.run(JUnitCore.java:137)
> 	at com.intellij.junit4.JUnit4IdeaTestRunner.startRunnerWithArgs(JUnit4IdeaTestRunner.java:68)
> 	at com.intellij.rt.execution.junit.IdeaTestRunner$Repeater.startRunnerWithArgs(IdeaTestRunner.java:47)
> 	at com.intellij.rt.execution.junit.JUnitStarter.prepareStreamsAndStart(JUnitStarter.java:242)
> 	at com.intellij.rt.execution.junit.JUnitStarter.main(JUnitStarter.java:70)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> 	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> 	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> 	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> 	at com.intellij.rt.execution.application.AppMainV2.main(AppMainV2.java:131)
> {code}



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list