Hi Simone, I remember hitting a similar issue back when I was testing a EA version of JDK 13. There was bug for it here https://bugs.openjdk.java.net/browse/JDK-8226649 and that one says it's fixed in "13" but doesn't have a build number associated with it. Which build of JDK 13 are you on?
I think I have a test case for this, which was running into this NPE. Later today, I will probably try it out against latest JDK 13 candidate release build and see if it's reproducible there. -Jaikiran On 05/09/19 11:14 PM, Simone Bordet wrote: > Hi, > > we have a number of TLS tests failing in Jetty when running on JDK 13, > while they work on JDK 11 and 12. > > The simplest way to reproduce this is to open 2 TLS sockets to Jetty, > one after the other. > > On the server, the first socket creates a SSLEngine which has a SSLSession. > Jetty calls SSLSession.getValue() to check whether a key (that we may > have put on the session during SNI processing) is there. For the first > socket this works. > > The second socket, however, is using resumption. On the server, a new > SSLEngine is created, but its SSLSession has field "boundValues" == > null so trying to call SSLSession.getValue() throws a NPE. > > Is this a regression? > > Thanks! >