You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Manikumar (Jira)" <ji...@apache.org> on 2023/10/08 07:04:00 UTC

[jira] [Resolved] (KAFKA-15502) Handle large keystores in SslEngineValidator

     [ https://issues.apache.org/jira/browse/KAFKA-15502?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Manikumar resolved KAFKA-15502.
-------------------------------
    Fix Version/s: 3.4.2
                   3.5.2
                   3.7.0
                   3.6.1
       Resolution: Fixed

> Handle large keystores in SslEngineValidator
> --------------------------------------------
>
>                 Key: KAFKA-15502
>                 URL: https://issues.apache.org/jira/browse/KAFKA-15502
>             Project: Kafka
>          Issue Type: Bug
>    Affects Versions: 3.6.0
>            Reporter: Manikumar
>            Assignee: Manikumar
>            Priority: Major
>             Fix For: 3.4.2, 3.5.2, 3.7.0, 3.6.1
>
>
> We have observed an issue where inter broker SSL listener is not coming up for large keystores (size >16K)
> 1. Currently validator code doesn't work well with large stores. Right now, WRAP returns if there is already data in the buffer. But if we need more data to be wrapped for UNWRAP to succeed, we end up looping forever.
> 2. Observed large TLSv3 post handshake messages are not getting read and causing validator code loop forever. This is observed with JDK17+
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)