[ https://issues.apache.org/jira/browse/HTTPCLIENT-1478?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14289833#comment-14289833 ]
Jonathan Haber commented on HTTPCLIENT-1478: -------------------------------------------- I thought [this|http://svn.apache.org/viewvc/httpcomponents/httpclient/branches/4.3.x/httpclient/src/main/java/org/apache/http/conn/ssl/SSLConnectionSocketFactory.java?r1=1560975&r2=1626784] commit made that unnecessary, is that not the case? > https calls ignore http.socket.timeout during SSL Handshake > ----------------------------------------------------------- > > Key: HTTPCLIENT-1478 > URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1478 > Project: HttpComponents HttpClient > Issue Type: Bug > Components: HttpConn > Affects Versions: 4.3 Final, 4.3.1, 4.3.2, 4.3.3 > Environment: All > Reporter: Jonah Schwartz > Priority: Minor > Fix For: 4.3.4 > > > https calls ignore http.socket.timeout during SSL Handshake. This can result > in a https call hanging forever waiting for socket read. > In both SSLSocketFactory and SSLConnectionSocketFactory, > sslsock.startHandshake(); is called before socket timeout is set on the > socket. This means timeout is not respected during the SSL handshake, and the > thread can hang with a stacktrace that looks like this: > org.apache.http.impl.client.AbstractHttpClient.doExecute > org.apache.http.impl.client.DefaultRequestDirector.execute > org.apache.http.impl.client.DefaultRequestDirector.tryConnect > org.apache.http.impl.conn.ManagedClientConnectionImpl.open > org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection > org.apache.http.conn.ssl.SSLSocketFactory.connectSocket > org.apache.http.conn.ssl.SSLSocketFactory.connectSocket > sun.security.ssl.SSLSocketImpl.startHandshake > sun.security.ssl.SSLSocketImpl.startHandshake > sun.security.ssl.SSLSocketImpl.performInitialHandshake > sun.security.ssl.SSLSocketImpl.readRecord > sun.security.ssl.InputRecord.read > sun.security.ssl.InputRecord.readV3Record > sun.security.ssl.InputRecord.readFully > java.net.SocketInputStream.read > java.net.SocketInputStream.socketRead0 -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org For additional commands, e-mail: dev-h...@hc.apache.org