akka/akka-http

Plaintext connection to HTTPS endpoint hangs on JDK 11

Open

#2,614 创建于 2019年7月24日

在 GitHub 查看
 (3 评论) (0 反应) (0 负责人)Scala (1,311 star) (598 fork)batch import
3 - in progressbughelp wantedt:coret:servert:tls

描述

On JDK 8, the connection closed, on JDK 11 the request just hangs until the idle-timeout kicks in.

Thanks for the report, @makkarpov.

See https://discuss.lightbend.com/t/akka-http-tls-server-hangs-when-it-receives-plaintext-connection/4636 and the reproducer at https://github.com/makkarpov/akka-tls-hangs-example.

贡献者指南

技术栈
scala
领域
backendapi
议题类型
bug
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
4
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
half day
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
clear
前置要求
Akka HTTP basicsTLS/SSL knowledgeJDK 11 environment
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
45
研究方向
Investigate the behavior difference between JDK 8 and JDK 11 when a plaintext connection is sent to an HTTPS endpoint in Akka HTTP. Reproduce using the example at https://github.com/makkarpov/akka tls hangs example. Look into Akka HTTP's TLS handling code in the server pipeline, specifically how it handles unexpected plaintext data. Check if the issue is related to changes in JDK 11's SSL implementation causing the connection to hang instead of closing.