You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Rick Hillegas (JIRA)" <ji...@apache.org> on 2007/06/08 23:04:26 UTC
[jira] Created: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Obscure error messages when using SSL in various combinations
-------------------------------------------------------------
Key: DERBY-2796
URL: https://issues.apache.org/jira/browse/DERBY-2796
Project: Derby
Issue Type: Bug
Components: Security
Affects Versions: 10.3.0.0
Reporter: Rick Hillegas
Fix For: 10.3.0.0
I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Myrna van Lunteren (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Myrna van Lunteren updated DERBY-2796:
--------------------------------------
Fix Version/s: (was: 10.3.0.0)
Unchecking 10.3.0.0, The version number of trunk was bumped with revision 547808, the changes went into trunk at revision 548301, that was 10.4.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.1.1, 10.4.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: DERBY-2796-code.stat
DERBY-2796-code.diff
Complete code fix attached which should solved all the issues mentioned by Rick.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen resolved DERBY-2796.
-------------------------------------
Resolution: Fixed
Fix Version/s: 10.4.0.0
Code: Committed revision 548322 on 10.3 branch.
Docs: Committed revision 548321 on 10.3 branch.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0, 10.4.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12504608 ]
Bernt M. Johnsen commented on DERBY-2796:
-----------------------------------------
Suggestion:
I'll try and get rid of the SSLException stack trace and change the two obscure error messages to e.g.:
ERROR 58009: A network protocol error was encountered and the connection has been terminated: A PROTOCOL Data Stream Syntax Error was detected. Reason: 0x3. Plaintext connection to an SSL enabled server?
and
Invalid reply header from network server: Invalid string . Plaintext connection to an SSL enabled server?
-------------------------------------------------------
There is also another case: If you run an ssl-enabled client against a plaintext server, you will get the following on the server console output:
Execution failed because of a Distributed Protocol Error: DRDA_Proto_SYNTAXRM; CODPNT arg = 0; Error Code Value = 3
org.apache.derby.impl.drda.DRDAProtocolException: Execution failed because of a Distributed Protocol Error: DRDA_Proto_SYNTAXRM; CODPNT arg = 0; Error Code Value = 3
at org.apache.derby.impl.drda.DRDAConnThread.throwSyntaxrm(DRDAConnThread.java:468)
at org.apache.derby.impl.drda.DDMReader.readDssHeader(DDMReader.java:348)
at org.apache.derby.impl.drda.DRDAConnThread.exchangeServerAttributes(DRDAConnThread.java:1024)
at org.apache.derby.impl.drda.DRDAConnThread.sessionInitialState(DRDAConnThread.java:618)
at org.apache.derby.impl.drda.DRDAConnThread.run(DRDAConnThread.java:264)
The text "Execution failed because of a Distributed Protocol Error: DRDA_Proto_SYNTAXRM; CODPNT arg = 0; Error Code Value = 3"
should be changed to "Execution failed because of a Distributed Protocol Error: DRDA_Proto_SYNTAXRM; CODPNT arg = 0; Error Code Value = 3. SSL connection attempt to plaintext server?
--------------------------------------------------
An finally: The docs should state that a plaintext server or client has no way to know whether the ther side is an SSL enabled derby client/server or some prgram using a totally different protocol, and thus the error messages you get might seem a bit awkward.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12503834 ]
Bernt M. Johnsen commented on DERBY-2796:
-----------------------------------------
The plan was that the network server refactoring (DERBY-2412) should clean up the exception handling so that the javax.net.ssl.SSLException stack trace should be fixed then.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: (was: DERBY-2796-docs.diff)
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen reassigned DERBY-2796:
---------------------------------------
Assignee: Bernt M. Johnsen
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: DERBY-2796-fix-sslexception.stat
DERBY-2796-fix-sslexception.diff
A patch to fix the unneeded SSLException stack trace to the console. Solved by starting the ssl handshake immediately after the socket creation. DRDA_NoIO needed an extra argument to communicate why connect did not succeed.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen resolved DERBY-2796.
-------------------------------------
Resolution: Fixed
Fix Version/s: 10.3.1.1
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0, 10.3.1.1, 10.4.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: DERBY-2796-docs.zip
DERBY-2796-docs.stat
DERBY-2796-docs.diff
Uploaded patch which adds a note about possible protocol error messages when mixing plaintext and ssl.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12503345 ]
Bernt M. Johnsen commented on DERBY-2796:
-----------------------------------------
The attachment belonged to DERBY-2795 and was therefore romved here.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: DERBY-2796-code-v2.stat
DERBY-2796-code-v2.diff
New version of code patch fixing testconnection master file.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: DERBY-2796-docs.zip
DERBY-2796-docs.stat
DERBY-2796-docs.diff
Uploaded patch which adds a note about possible protocol error messages when mixing plaintext and ssl.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Rick Hillegas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rick Hillegas closed DERBY-2796.
--------------------------------
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0, 10.4.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: (was: DERBY-2796-docs.zip)
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Reopened: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen reopened DERBY-2796:
-------------------------------------
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0, 10.4.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Dag H. Wanvik (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12505280 ]
Dag H. Wanvik commented on DERBY-2796:
--------------------------------------
The patch looks good to me; the hint in the error messages will be
indeed helpful to understand what's going on if the user has
misconfigured.
I notice that you had to remove localized versions of J131 "A PROTOCOL
Data Stream Syntax Error was detected. Reason: 0x{0}." since this is
now extended. For these locales this message will then fall back to
English.
I did not run any tests to verify these changes.
Nits:
* NetworkServerControlImpl
- Modified lines > 80
- Spurious blank diffs (lines 2288-2290)
I see you have updated the user docs and releaseNote.html of
DERBY-2108 accordingly, good! Some small comments on the latter:
> Summary of Change - SSL/TLS implemented for client/server
> communication.
I would make the title more descriptive:
"Summary of Change - Encryption of data traffic between client and
server is now supported via SSL/TLS."
or some such.
> Rationale for Change - The messages had to be extended due to more
> failure scenarios when connecting a client to a Derby server.
I think this is the rationale for the changed error messages, not for
the issue's feature change which is introduction of SSL support.
I think the rationale here would be something like:
"Encryption of data traffic between client and server is a desired
security feature for Derby."
Another change not mentioned is that localized versions of J131 will
now fall back to English. You may want to add that, perhaps.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: (was: DERBY-2796-doc-bug.diff)
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12505770 ]
Bernt M. Johnsen commented on DERBY-2796:
-----------------------------------------
Code: Committed revision 548301 on trunk.
Docs: Committed revision 548304 on trunk.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
Re: [jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Dag H. Wanvik" <Da...@Sun.COM>.
"Bernt M. Johnsen (JIRA)" <ji...@apache.org> writes:
> 1) When you have a plaintext server/client communication with an ssl
> peer, the plaintext side will just see garbage. That garbage, may be
> SSL-encoded communication or it might be something else. It is hard
Changing the error message text to indicate the possibility of peer
talking ssl would be useful, perhaps.
The current message:
> "A network protocol error was encountered and the connection has been
terminated: A PROTOCOL Data Stream Syntax Error was detected."
could be confusing. Always nice if error messages help pin-point the
problem.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12503338 ]
Bernt M. Johnsen commented on DERBY-2796:
-----------------------------------------
Thanks for your input.
1) When you have a plaintext server/client communication with an ssl peer, the plaintext side will just see garbage. That garbage, may be SSL-encoded communication or it might be something else. It is hard to give meaningful error-messages and it would require a major rewrite of the DRDA code, since this is detected way donw in the call stack. I think documentation is the proper solution here for the time being.
2) The SSLException "javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?" I think is ok, but it might be good to get rid of the stack trace. We have to propagate the text out to the user, since that is the only clue the user might get of what went wrong. Is this an doc issue too?
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Rick Hillegas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rick Hillegas updated DERBY-2796:
---------------------------------
Attachment: ssltest.html
Attaching ssltest.html, which describes my findings.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: (was: DERBY-2796-docs.stat)
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Rick Hillegas (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rick Hillegas closed DERBY-2796.
--------------------------------
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.1.1, 10.4.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DERBY-2796) Obscure error messages when using SSL
in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bernt M. Johnsen updated DERBY-2796:
------------------------------------
Attachment: DERBY-2796-doc-bug.diff
Fixing the doc typo.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DERBY-2796) Obscure error messages when using
SSL in various combinations
Posted by "Bernt M. Johnsen (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DERBY-2796?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12505306 ]
Bernt M. Johnsen commented on DERBY-2796:
-----------------------------------------
Thanks Dag. I won't have time to address your issues with the patch before the deadline (which is in 2 minutes), so I really hope there will be an RC2 for this issue to make it into 10.3.
> Obscure error messages when using SSL in various combinations
> -------------------------------------------------------------
>
> Key: DERBY-2796
> URL: https://issues.apache.org/jira/browse/DERBY-2796
> Project: Derby
> Issue Type: Bug
> Components: Security
> Affects Versions: 10.3.0.0
> Reporter: Rick Hillegas
> Assignee: Bernt M. Johnsen
> Fix For: 10.3.0.0
>
> Attachments: DERBY-2796-code-v2.diff, DERBY-2796-code-v2.stat, DERBY-2796-code.diff, DERBY-2796-code.stat, DERBY-2796-docs.diff, DERBY-2796-docs.stat, DERBY-2796-docs.zip, DERBY-2796-fix-sslexception.diff, DERBY-2796-fix-sslexception.stat, ssltest.html
>
>
> I ran clients with various ssl configurations on their urls and startup options against servers with various ssl configurations. I will attach an html file recording my results. I feel that many of the error conditions raised diagnostics which were too obscure to be helpful. I think this will be burdensome to tech support.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.