Hello,
I've seen a TLS problem with JDK 14.0.1 and Apache River 3.0 that I want to
share in case someone else runs into the same issue. A client will receive a
"Contraints are not supported” error when attempting to perform a reggie lookup
when using TLS. The call to ServerAuthManager.getServerCertificate() returns
null instead of the server certificate because the sslSessionContext doesn't
have any session ids.
ServerAuthManager.java:113
if (sslSessionContext.getSession(session.getId()) != null) { //
sslSessionContext.getSession() returns null with JDK 14.0.1
// returns the server certificate
}
The workaround is to use -Djdk.tls.server.enableSessionTicketExtension=false on
the server or use JDK 15 according to the OpenJDK bug report:
https://bugs.openjdk.java.net/browse/JDK-8242008
<https://bugs.openjdk.java.net/browse/JDK-8242008>