Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-3413

Check SSL/TLS handshake error handling in undertow

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 7.0.0.ER6
    • 7.0.0.ER5
    • Security, Undertow
    • None
    • Hide
      • Configure HTTPS using TLS 1.2 for fips java (unsupported configuration)
      • Start eap (no error)
      • Access https://127.0.0.1:8443. Expected error java.security.NoSuchAlgorithmException: no such algorithm: SunTls12MasterSecret for provider SunPKCS11-testPkcs occures. EAP start to use 100% of CPU
      Show
      Configure HTTPS using TLS 1.2 for fips java (unsupported configuration) Start eap (no error) Access https://127.0.0.1:8443 . Expected error java.security.NoSuchAlgorithmException: no such algorithm: SunTls12MasterSecret for provider SunPKCS11-testPkcs occures. EAP start to use 100% of CPU

    Description

      100% CPU usage with unsupported configuration

      Per [2] provided reproducer is not supported configuration and will be documented in [1]. My main concern here is if you can revise undertow implementation to avoid 100% CPU usage by any other SSL handshake error. See EAP thread dump and stack trace in attachment.

      [1] https://issues.jboss.org/browse/JBEAP-3160
      [2] https://bugs.openjdk.java.net/browse/JDK-8029661

      Attachments

        1. eap.stacktrace
          2 kB
        2. fips_tls12.threaddump
          54 kB
        3. standalone.xml
          22 kB

        Issue Links

          Activity

            People

              sdouglas1@redhat.com Stuart Douglas
              mchoma@redhat.com Martin Choma
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: