Hello,

I've seen a TLS problem with JDK 14.0.1 and Apache River 3.0 that I want to 
share in case someone else runs into the same issue. A client will receive a 
"Contraints are not supported” error when attempting to perform a reggie lookup 
when using TLS. The call to ServerAuthManager.getServerCertificate() returns 
null instead of the server certificate because the sslSessionContext doesn't 
have any session ids.

ServerAuthManager.java:113
if (sslSessionContext.getSession(session.getId()) != null)  {  // 
sslSessionContext.getSession() returns null with JDK 14.0.1
       // returns the server certificate
}

The workaround is to use -Djdk.tls.server.enableSessionTicketExtension=false on 
the server or use JDK 15 according to the OpenJDK bug report: 
https://bugs.openjdk.java.net/browse/JDK-8242008 
<https://bugs.openjdk.java.net/browse/JDK-8242008> 

Reply via email to