akka/akka-http

Plaintext connection to HTTPS endpoint hangs on JDK 11

Open

#2,614 opened on Jul 24, 2019

View on GitHub
 (3 comments) (0 reactions) (0 assignees)Scala (1,311 stars) (598 forks)batch import
3 - in progressbughelp wantedt:coret:servert:tls

Description

On JDK 8, the connection closed, on JDK 11 the request just hangs until the idle-timeout kicks in.

Thanks for the report, @makkarpov.

See https://discuss.lightbend.com/t/akka-http-tls-server-hangs-when-it-receives-plaintext-connection/4636 and the reproducer at https://github.com/makkarpov/akka-tls-hangs-example.

Contributor guide

Tech stack
scala
Domain
backendapi
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Akka HTTP basicsTLS/SSL knowledgeJDK 11 environment
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
45
Research direction
Investigate the behavior difference between JDK 8 and JDK 11 when a plaintext connection is sent to an HTTPS endpoint in Akka HTTP. Reproduce using the example at https://github.com/makkarpov/akka tls hangs example. Look into Akka HTTP's TLS handling code in the server pipeline, specifically how it handles unexpected plaintext data. Check if the issue is related to changes in JDK 11's SSL implementation causing the connection to hang instead of closing.