-
Notifications
You must be signed in to change notification settings - Fork 69
Closed
Labels
bugSomething isn't workingSomething isn't working
Description
Describe the bug
When tls``client binding is configured to use TLSv1.3 (default) and remote TLS endpoint also supports TLSv1.3 then the TLS handshake can stall.
To Reproduce
Configure zilla.yaml to use tls client binding with TLSv1.3 and attempt to complete TLS handshake.
Expected behavior
TLSv1.3 handshake should complete successfully.
Additional context
As a workaround, explicitly configuring the tls client binding version to use TLSv1.2 prevents the stall.
SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3
See https://bugs.openjdk.org/browse/JDK-8240871 for details.
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working