[jira] [Commented] (APLO-292) javax.net.ssl.SSLException in latest snapshot

["Jon Ekdahl (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/APLO-292?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13812737#comment-13812737 ] 

Jon Ekdahl commented on APLO-292:
---------------------------------

I am seeing this exact message in the console with Apollo 1.6. What I did should be easy to reproduce:

# Create a new broker and start it
# Log in to the _https_ admin interface at https://127.0.0.1:61681 and accept the certificate
# The console starts filling up with SSLException warnings

Apollo reports this on startup:
{quote}
INFO  | OS     : Linux 3.8.0-32-generic (Ubuntu 13.04)
INFO  | JVM    : Java HotSpot(TM) 64-Bit Server VM 1.7.0_15 (Oracle Corporation)
INFO  | Apollo : 1.6 (at: /data/home/damaan/tools/apache-apollo-1.6)
{quote}

And further down in the console log I get these:
{quote}
WARN  | javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
WARN  | javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
{quote}

Note that I am using Chromium (Version 28.0.1500.71 Ubuntu 13.04 (28.0.1500.71-0ubuntu1.13.04.1)). I was not able to reproduce using Firefox 25.0.

A brief look in Chromium devtools shows these two URL being called once every two seconds. 

https://127.0.0.1:61681/api/json/broker/virtual-hosts/mybroker
https://127.0.0.1:61681/api/json/broker/virtual-hosts/mybroker/queues?p=0&ps=25&o=id&f=id&f=metrics.queue_items&f=metrics.queue_size&f=metrics.producer_count&f=metrics.consumer_count

Incidentally, this is also the rate at which my log is filling up with SSLException warnings.

> javax.net.ssl.SSLException in latest snapshot
> ---------------------------------------------
>
>                 Key: APLO-292
>                 URL: https://issues.apache.org/jira/browse/APLO-292
>             Project: ActiveMQ Apollo
>          Issue Type: Bug
>         Environment: apollo-99-trunk-20130202.135855-180
>            Reporter: Lionel Cons
>            Assignee: Hiram Chirino
>
> On some brokers with the latest Apollo snapshot, we do see:
> 2013-02-04 14:18:54,382 | WARN  | javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack? | 
> Any idea on what is causing this?



--
This message was sent by Atlassian JIRA
(v6.1#6144)