Re: [jetty-users] Is there a way to get SSLHandshakeException on certifi

[Yuta Higuchi <yuta.higuchi@xxxxxxxxxxxxx>]

Little update, it seems like there is a race condition somewhere, 

causing inconsistencies in what Exception I get as failure on certificate error.

When I run the small reproducer code I've posted earlier,

 https://gist.github.com/YutaHiguchi-bsn/c76dfd60ac4c2c711fcaddbf6b267f3b

This time running it repeatedly from IntelliJ, 

there are some cases it's getting SSLHandshakeException as failure,  

and some cases it gets EOFException.

I've tried if setStrictEventOrdering(true) will changes the situation but 
looks like that does not impact this certificate failure case.

Is there something else that can be configured to make this behavior a bit more consistent?

On Wed, Jun 5, 2019 at 11:05 AM Yuta Higuchi <yuta.higuchi@xxxxxxxxxxxxx> wrote:

Thanks, for taking a look. 

I was using JDK 1.8 on macOS 10.14.5 at the time.

$ java -version
openjdk version "1.8.0_212"
OpenJDK Runtime Environment (AdoptOpenJDK)(build 1.8.0_212-b03)
OpenJDK 64-Bit Server VM (AdoptOpenJDK)(build 25.212-b03, mixed mode)

I've tried Correto version of 1.8 as well, but got same result.

On Tue, Jun 4, 2019 at 11:35 PM Simone Bordet <sbordet@xxxxxxxxxxx> wrote:

Hi,

On Wed, Jun 5, 2019 at 2:12 AM Yuta Higuchi <yuta.higuchi@xxxxxxxxxxxxx> wrote:
>
> Hi,
>
> I'm trying to find a way to properly handle error using jetty client
> and I'm facing an issue that I cannot get the root cause
> when the error is caused by certificate error.
>
> Small reproducer code:
> https://gist.github.com/YutaHiguchi-bsn/c76dfd60ac4c2c711fcaddbf6b267f3b
>
> Expectation was, Throwable I can get from the listener will be
> SSLHandshakeException, etc.
> but instead I am getting error as early EOFException.
>
> So from the client code, I cannot know that it was certificate issue.
>
> Is there proper way to get information about the root cause?
>
> I'm currently using jetty-client 9.4.18.v20190429

I tried your reproducer and it works for me, yielding correctly the
SslHandshakeException.
JDK version?

--
Simone Bordet
----
http://cometd.org
http://webtide.com
Developer advice, training, services and support
from the Jetty & CometD experts.
_______________________________________________
jetty-users mailing list
jetty-users@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/jetty-users