You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2020/06/01 09:17:23 UTC

[Bug 64486] New: Receiving null/empty request body when SSL enabled

https://bz.apache.org/bugzilla/show_bug.cgi?id=64486

            Bug ID: 64486
           Summary: Receiving null/empty request body when SSL enabled
           Product: Tomcat 9
           Version: 9.0.31
          Hardware: HP
                OS: Linux
            Status: NEW
          Severity: major
          Priority: P2
         Component: Connectors
          Assignee: dev@tomcat.apache.org
          Reporter: vinkvii@gmail.com
  Target Milestone: -----

I am posting large body(~12-18kb) to the REST . The endpoint is receiving
null/empty Request Body randomly(not with every request).

When I am facing this issue:

1. When SSL(self-signed) is enabled in
spring-boot(https://server:port/{endpoint})
2. The issue is not consistent , it happens randomly(not every request)
3. Issue does not occur when the post body size is very low.
4. Same request works for HTTP consistently but not with HTTPS

Project Details:
1. Spring Boot 2.2.5 with Tomcat as embedded server
2. TLSV12
3. OpenJDK8
4. Certificate is Selfsigned

What we have tried to debug

1. Decrypted tcpdump shows the body is present.
2. Tried changing the JVM, spring boot server configuration
(heapsize,stacksize, ciphers change )
3. Checked the logs, have not found anything concrete.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 64486] Receiving null/empty request body when SSL enabled

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64486

vinkvii@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|INVALID                     |FIXED

--- Comment #2 from vinkvii@gmail.com ---
Hi

It is not an invalid issue. We updated the tomcat jar 9.0.31 to 9.0.35 in our
spring boot project lib directory and the issue is resolved now.

It seems the issue could be related to EOF return before the whole read.

Fix : Update to latest Version of Tomcat 9.0.35.

Marking it as Fixed in updated Version.





Thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 64486] Receiving null/empty request body when SSL enabled

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64486

mgrigorov <mg...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #1 from mgrigorov <mg...@apache.org> ---
There is no proof is a bug in the description.
Please use users@tomcat.apache.org for support!

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 64486] Receiving null/empty request body when SSL enabled

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64486

mgrigorov <mg...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|FIXED                       |DUPLICATE

--- Comment #4 from mgrigorov <mg...@apache.org> ---


*** This bug has been marked as a duplicate of bug 64195 ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 64486] Receiving null/empty request body when SSL enabled

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=64486

--- Comment #3 from vinkvii@gmail.com ---
Additional Comments:

The issue could be related to the bug:
https://bz.apache.org/bugzilla/show_bug.cgi?id=64195 

Thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org