You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@activemq.apache.org by "Hiram Chirino (JIRA)" <ji...@apache.org> on 2013/04/03 16:33:17 UTC

[jira] [Comment Edited] (APLO-287) Weird errors with SSL + Java 7

    [ https://issues.apache.org/jira/browse/APLO-287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13620954#comment-13620954 ] 

Hiram Chirino edited comment on APLO-287 at 4/3/13 2:32 PM:
------------------------------------------------------------

Folks in the post in the previous thread reported that disabling the Diffie-Hellman cypher suite lets them work around the issue /w Java 7.  I've just deployed a new build of Apollo which supports disabling the Diffie-Hellman cypher suite.

Lionel, if you get a chance could you try out the new snapshot build on Java 7 and update the connector configuration similar to the following:

<connector id="ssl" bind="ssl://0.0.0.0:61614?disabled_cypher_suites=DHE" /> 

Let me know if disabling the DHE cyphers helps out on Java 7.
                
      was (Author: chirino):
    Folks in the post in the previous thread reported that disabling the Diffie-Hellman cypher suite lets them work around the issue /w Java 7.  I've just deployed a new build of Apollo which supports disabling the Diffie-Hellman cypher suite.

Lionel, if you get a chance could you try out the new snapshot build on Java 7 and update the connector configuration similar to the following:

connector id="ssl" bind="ssl://0.0.0.0:61614?disabled_cypher_suites=DHE" /> 

Let me know if disabling the DHE cyphers helps out on Java 7.
                  
> Weird errors with SSL + Java 7
> ------------------------------
>
>                 Key: APLO-287
>                 URL: https://issues.apache.org/jira/browse/APLO-287
>             Project: ActiveMQ Apollo
>          Issue Type: Bug
>         Environment: apollo-99-trunk-20130115.031918-158
>            Reporter: Lionel Cons
>            Assignee: Hiram Chirino
>
> When running simple functionality tests (that use STOMP+SSL) against apollo-99-trunk-20130115.031918-158, everything works fine when the broker runs on top of a Java 6 JVM.
> However, the exact same tests again the exact same version of Apollo fail randomly when the broker runs on top of a Java 7 JVM. For the record, we use: Java HotSpot(TM) 64-Bit Server VM 1.7.0_10 (Oracle Corporation).
> Here is what the broker logs:
> 2013-01-17 11:09:09,663 Shutting connection 'null'  down due to: java.io.EOFException: Peer disconnected
> 2013-01-17 11:09:09,764 Shutting connection 'null'  down due to: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
> 2013-01-17 11:11:16,110 Shutting connection 'null'  down due to: javax.net.ssl.SSLHandshakeException: Invalid padding
> 2013-01-17 11:13:54,671 Shutting connection 'null'  down due to: javax.net.ssl.SSLHandshakeException: Invalid padding
> [...]
> First of all, is Apollo supported on Java 7?
> If yes, any idea what could cause these failures on Java 7?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira