[
https://issues.apache.org/jira/browse/KAFKA-9711?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jun Rao resolved KAFKA-9711.
----------------------------
Fix Version/s: 2.6.0
Resolution: Fixed
Merged the PR to trunk.
> The authentication failure caused by SSLEngine#beginHandshake is not properly
> caught and handled
> ------------------------------------------------------------------------------------------------
>
> Key: KAFKA-9711
> URL: https://issues.apache.org/jira/browse/KAFKA-9711
> Project: Kafka
> Issue Type: Bug
> Reporter: Chia-Ping Tsai
> Assignee: Chia-Ping Tsai
> Priority: Major
> Fix For: 2.6.0
>
>
> {code:java}
> @Override
> public void handshake() throws IOException {
> if (state == State.NOT_INITALIZED)
> startHandshake(); // this line
> if (ready())
> throw renegotiationException();
> if (state == State.CLOSING)
> throw closingException();
> {code}
> SSLEngine#beginHandshake is possible to throw authentication failures (for
> example, no suitable cipher suites) so we ought to catch SSLException and
> then convert it to SslAuthenticationException so as to process authentication
> failures correctly.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
