Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 8.0 Update 1.8.0-dev-1, 8.0 Update 8
Affects Version/s: None
Component/s: Security
Labels:
- regression_test_only

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

8.0.z.GA
Git Pull Request:
https://github.com/wildfly-security/wildfly-elytron/pull/2280

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

It seems that Elytron does not set a SocketConfig when creating a connection manager for the Apache HTTP Client ([1] and [2]):

Without a SocketConfig with a Socket timeout the TLS handshake can hang indefinetly.

This is a similar issue as ~~RESTEASY-3591~~.

[1] https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/impl/conn/PoolingHttpClientConnectionManager.html#setDefaultSocketConfig(org.apache.http.config.SocketConfig)
[2] https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/impl/conn/BasicHttpClientConnectionManager.html#setSocketConfig(org.apache.http.config.SocketConfig)

clones

JBEAP-30010 (8.1.0) ELY-2893 - No SocketConfig is set for Connection Manager in HttpClientBuilder which can cause indefinetly hangs

Verified

ELY-2893 No SocketConfig is set for Connection Manager in HttpClientBuilder which can cause indefinitely hangs

Resolved

is incorporated by

JBEAP-29999 (8.0.z) Upgrade WildFly Elytron from 2.2.10.Final-redhat-00001 to 2.2.11.Final-redhat-00001

Closed

is related to

JBEAP-30001 [GSS](8.0.z) ELY-2753 - Add connection-timeout-millis, connection-ttl-millis and socket-timeout-millis to OidcJsonConfiguration to allow oidc.json configuration to parse these attributes

Verified

Assignee:: Ilia Vassilev

Reporter:: Ilia Vassilev

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2025/04/25 11:54 AM

Updated:: 2025/06/24 3:03 PM

Resolved:: 2025/05/06 12:33 PM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates

Hide