Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 8.1.0.GA-CR2, 8.1.0.GA
Affects Version/s: None
Component/s: Security
Labels:
- regression_test_only

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

8.1.0.GA
Git Pull Request:
https://github.com/wildfly-security/wildfly-elytron/pull/2280

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

It seems that Elytron does not set a SocketConfig when creating a connection manager for the Apache HTTP Client ([1] and [2]):

Without a SocketConfig with a Socket timeout the TLS handshake can hang indefinetly.

This is a similar issue as ~~RESTEASY-3591~~.

[1] https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/impl/conn/PoolingHttpClientConnectionManager.html#setDefaultSocketConfig(org.apache.http.config.SocketConfig)
[2] https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/impl/conn/BasicHttpClientConnectionManager.html#setSocketConfig(org.apache.http.config.SocketConfig)

clones

ELY-2893 No SocketConfig is set for Connection Manager in HttpClientBuilder which can cause indefinitely hangs

Resolved

is cloned by

JBEAP-30011 (8.0.z) ELY-2893 - No SocketConfig is set for Connection Manager in HttpClientBuilder which can cause indefinetly hangs

Verified

is related to

JBEAP-29920 [GSS](8.1.0) ELY-2753 - Add connection-timeout-millis, connection-ttl-millis and socket-timeout-millis to OidcJsonConfiguration to allow oidc.json configuration to parse these attributes

Verified

Assignee:: Pedro Silva

Reporter:: Thomas Beckers

Tester:: Ondrej Kotek

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: 2025/04/25 11:50 AM

Updated:: 2025/07/14 12:28 PM

Resolved:: 2025/07/09 4:58 PM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates