Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[jetty-users] Busy loop with: javax.net.ssl.SSLException: Received fatal alert: certificate_unknown

Hi

We are running Gerrit code review [1] with embedded Jetty and over https.
Last few days our production system suffered from periodical high CPU usage (100%).
During the high CPU usage periods, each taking more than 5 minutes, our error log gets filled in with millions of entries like:
...
[2011-05-09 14:22:52,556] WARN  org.eclipse.jetty.util.log : javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[2011-05-09 14:22:52,556] WARN  org.eclipse.jetty.util.log : javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[2011-05-09 14:22:52,556] WARN  org.eclipse.jetty.util.log : javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[2011-05-09 14:22:52,556] WARN  org.eclipse.jetty.util.log : javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
...

Actually we recently upgraded Gerrit which also included upgrade of Jetty from the 7.2.1.v20101111 to the 7.4.0.v20110414
and since then this issue started occurring.

As a test I downgraded Jetty back to the 7.2.1.v20101111 version and since then the issue seems to be gone.
More precisely, it is still there but instead of millions of log entries we see only about 10 of them and
the high CPU usage symptom is gone.

Is this related to this JVM_NIO bug [2]?

Is this a known issue with Jetty 7.4.0.x?

Sasa Zivkov


[1] http://code.google.com/p/gerrit/
[2] http://wiki.eclipse.org/Jetty/Feature/JVM_NIO_Bug


Back to the top