[jira] [Commented] (GEODE-7917) Problem forming SSL connection in multisite setup

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GEODE-7917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17076539#comment-17076539 ] 

ASF subversion and git services commented on GEODE-7917:
--------------------------------------------------------

Commit 552cdead5664c0b004094a136d9c419983ff38a9 in geode's branch refs/heads/develop from Mario Ivanac
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=552cdea ]

GEODE-7917: change thrown exception type for SSL to IOException (#4858)

* GEODE-7917: Change exception type to IOException when caused by EOFException

* GEODE-7917: added test

* GEODE-7917: update after comments

> Problem forming SSL connection in multisite setup
> -------------------------------------------------
>
>                 Key: GEODE-7917
>                 URL: https://issues.apache.org/jira/browse/GEODE-7917
>             Project: Geode
>          Issue Type: Bug
>          Components: wan
>            Reporter: Mario Ivanac
>            Assignee: Mario Ivanac
>            Priority: Major
>         Attachments: javax_net_debug.log
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> We are installing two sites, with one locator in each site, and TLS enabled. Problem appears when locators on both sides are started at same time. In that case, on both locators, immediately after they are started, IllegalStateException is caught, and connections are never reestablished.
>  
> javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
>  at java.base/sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1320)
>  at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1159)
>  at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1062)
>  at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)
>  at org.apache.geode.internal.net.SocketCreator.configureClientSSLSocket(SocketCreator.java:1112)
>  at org.apache.geode.internal.net.SocketCreator.connect(SocketCreator.java:879)
>  at org.apache.geode.internal.net.SocketCreator.connect(SocketCreator.java:841)
>  at org.apache.geode.internal.net.SocketCreator.connect(SocketCreator.java:830)
>  at org.apache.geode.distributed.internal.tcpserver.TcpClient.requestToServer(TcpClient.java:208)
>  at org.apache.geode.cache.client.internal.locator.wan.LocatorDiscovery.exchangeRemoteLocators(LocatorDiscovery.java:195)
>  at org.apache.geode.cache.client.internal.locator.wan.LocatorDiscovery$RemoteLocatorDiscovery.run(LocatorDiscovery.java:121)
>  at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
>  at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
>  at java.base/java.lang.Thread.run(Thread.java:834)
>  Suppressed: java.net.SocketException: Broken pipe (Write failed)
>  at java.base/java.net.SocketOutputStream.socketWrite0(Native Method)
>  at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:110)
>  at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:150)
>  at java.base/sun.security.ssl.SSLSocketOutputRecord.encodeAlert(SSLSocketOutputRecord.java:81)
>  at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:351)
>  at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:263)
>  at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:405)
>  ... 10 more
>  Caused by: java.io.EOFException: SSL peer shut down incorrectly
>  at java.base/sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:167)
>  at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:108)
>  at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1151)
>  ... 12 more
>  
> If locators are restarted one by one, everything is OK.
> Added log of the fault with set javax.net.debug=all.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)