client authentication with revoked cert results in server no response.

[Trustin Lee]

This is interesting.  Let me investigate on this issue further.

It is correct to close the channel when you get SSLHandshakeException.

— Trustin Lee, http://gleamynode.net/


On Thu, Apr 9, 2009 at 6:40 AM, huican ping <pinghuican at gmail.com> wrote:
> The threadDump file is attached.
>
> The CPU usage is low, it seems stuck at SSLEngine.unwrap().
>
> The exception in the exceptionCaught() I can see is
> SSLHandshakeException, and I close() the channel after.
>
> Do you have any suggestion what I should do when I got SSLHandshakeException?
> It could be the clean up issue after I got ssl exception.
>
>
> On Wed, Apr 8, 2009 at 1:21 AM, Trustin Lee <tlee at redhat.com> wrote:
>> Hi Huican,
>>
>> Thanks for reporting the problem first of all.
>>
>> Could you provide the full thread dump which can be obtained by kill
>> -3 or jstack command?  The attached screenshot doesn't reveal enough
>> information to track down the problem.
>>
>> — Trustin Lee, http://gleamynode.net/
>>
>>
>>
>> On Tue, Apr 7, 2009 at 3:43 AM, huican ping <pinghuican at gmail.com> wrote:
>>> Hello Trustin,
>>>
>>> I am attaching a yourkit picture showing the blocked threads after I
>>> sent in 4 messages.
>>> You can see our code exceptionCaught(), and netty lib channel close(),
>>> and it stuck at the SSLEngineImpl code.
>>>
>>> I will see whether I can generate something else.
>>>
>>> On Fri, Apr 3, 2009 at 1:23 AM, Trustin Lee <tlee at redhat.com> wrote:
>>>
>>>> Did you find something useful in the full thread dump in client and
>>>> server?  Your application might have been stuck somewhere.  Please
>>>> post the full thread dump of the both side.
>>>>
>>>> If you don't think this is the case where the full thread dump reveals
>>>> the cause of the problem, please attach small test application that
>>>> reproduces the problem.
>>>>
>>>> Thanks,
>>>>
>>>> — Trustin Lee, http://gleamynode.net/
>>>>
>>>> _______________________________________________
>>>> netty-users mailing list
>>>> netty-users at lists.jboss.org
>>>> https://lists.jboss.org/mailman/listinfo/netty-users
>>>>
>>>
>>> _______________________________________________
>>> netty-users mailing list
>>> netty-users at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/netty-users
>>>
>>>
>>
>> _______________________________________________
>> netty-users mailing list
>> netty-users at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/netty-users
>>
>
> _______________________________________________
> netty-users mailing list
> netty-users at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/netty-users
>
>