Uwe,

Is there a way to capture the output when running with -Djavax.net.debug=all ? That would be useful to get a bit more detail on what is going on.

There are several threads on security-dev right now discussing issues around TLS 1.3 and the handshake. Simone Bordet from the Jetty team is involved in one or two threads as there seems to be some interop issues that are being discussed. It's possible that you are running into something in this area but I can't say for sure.

-Alan

On 13/07/2018 22:37, Uwe Schindler wrote:
Hi Alan, hi Rory,

Thanks for the update. The NPE no longer happens with JDK 11 ea build 22, but - 
unfortunately - it now breaks a bit later, also inside Apache Http Client when 
calling the SSLSocketImpl:

    [junit4]   2> Caused by: javax.net.ssl.SSLHandshakeException: Remote host 
terminated the handshake
    [junit4]   2>    at 
sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1121) ~[?:?]
    [junit4]   2>    at 
sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:885) ~[?:?]
    [junit4]   2>    at 
sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:810) ~[?:?]
    [junit4]   2>    at 
sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:383) ~[?:?]
    [junit4]   2>    at 
org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:396)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:355)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:359)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:381)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:237) 
~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:185) 
~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89) 
~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:111) 
~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:56)
 ~[httpclient-4.5.3.jar:4.5.3]
    [junit4]   2>    at 
org.apache.solr.client.solrj.impl.HttpSolrClient.executeMethod(HttpSolrClient.java:542)
 ~[java/:?]
    [junit4]   2>    ... 12 more

The number of tests failing is therefore the same (it varies a bit, because the 
communication to solr is done with HTTPS randomly).
I think this is a new bug relating to the TLS 1.3 integration. A bit of 
background: This is Apache's HTTPClient talking to a Jetty 9.3 server on 
127.0.0.1.

Once I have some time on the weekend or next week, I will setup a simple Jetty 
webserver and will use Apache's HttpClient to talk to it.

Uwe

-----Original Message-----
From: Uwe Schindler <uwe.h.schind...@gmail.com>
Sent: Friday, July 13, 2018 11:59 AM
To: 'Alan Bateman' <alan.bate...@oracle.com>; 'Rory O'Donnell'
<rory.odonn...@oracle.com>
Subject: RE: FW: [JENKINS-EA] Lucene-Solr-7.x-Linux (64bit/jdk-11-ea+21) -
Build # 2276 - Unstable!

Hi Alan,

I installed this version on Linux and Windows Jenkins. First build is running!
https://jenkins.thetaphi.de/job/Lucene-Solr-7.x-Linux/2315/

Uwe


-----Original Message-----
From: Alan Bateman <alan.bate...@oracle.com>
Sent: Friday, July 13, 2018 8:43 AM
To: Uwe Schindler <uwe.h.schind...@gmail.com>; 'Rory O'Donnell'
<rory.odonn...@oracle.com>
Subject: Re: FW: [JENKINS-EA] Lucene-Solr-7.x-Linux (64bit/jdk-11-ea+21) -
Build # 2276 - Unstable!


jdk-11+22 has been published and includes this fix so I hope you will be
able to test Lucene with this build.

-Alan


On 07/07/2018 14:26, Alan Bateman wrote:
There was a regression in jdk-11+20 after the TLS 1.3 integration. The
bug is JDK-8206355 [1] and the fix is in jdk/jdk11 so should be next
week's build (jdk+11+22).

-Alan

[1] https://bugs.openjdk.java.net/browse/JDK-8206355



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to