Re: [jetty-users] jetty 9.2.7 - SSLException when POST/GET methods are i

[Joakim Erdfelt <joakim@xxxxxxxxxxx>]

Since you are running SSL with Jetty, you are running a non-expired Java JVM, right?

This is not optional, its a requirement when working with SSL (now TLS).

The myriad of bugs and vulnerabilities have forced many updates to SSL/TLS.

There are even updates to SSL/TLS because of the HTTP/2 spec that affects users not even using HTTP/2.

All of the major browsers (desktop and mobile) have updated for these changes.

Lets start with with that first, as these sort of errors are typically a result of an outdated/expired SSL/TLS layer.

Also, do you run anything in front of Jetty?

And what does HttpQueuedThreadPool do? (from that signature, it seems that the standard java.util.concurrent.ThreadPoolExecutor is probably similar)

http://docs.oracle.com/javase/8/docs/api/java/util/concurrent/ThreadPoolExecutor.html#ThreadPoolExecutor-int-int-long-java.util.concurrent.TimeUnit-java.util.concurrent.BlockingQueue-

Joakim Erdfelt / joakim@xxxxxxxxxxx

On Thu, Sep 3, 2015 at 1:52 PM, Sesha Shayan Nandyal <snandyal@xxxxxxxxxxx> wrote:

Hello,

   We are using jetty 9.2.7. When we call HTTP GET/POST methods, we get the following exception:

[ERROR]:Thread[HttpListener-17,5,main][delayed:false,suspends:0]:15-09-03T14:34:27.381-0600: javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?

at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)

at sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1561)

at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.closeInbound(SslConnection.java:690)

at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:532)

at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:227)

at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)

at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)

:

:

I have the following code for setting up ThreadPool

BlockingQueue blockingQueue = new BlockingArrayQueue(maxThreads);

QueuedThreadPool threadPool = new HttpQueuedThreadPool(maxThreads, minThreads, idleTimeout, blockingQueue);

_server = new Server(_threadPool);

What am I doing incorrect?

Thank you,

Sesha

_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-users