Skip to content

TLSv1.3 client handshake stall #791

@jfallows

Description

@jfallows

Describe the bug
When tls``client binding is configured to use TLSv1.3 (default) and remote TLS endpoint also supports TLSv1.3 then the TLS handshake can stall.

To Reproduce
Configure zilla.yaml to use tls client binding with TLSv1.3 and attempt to complete TLS handshake.

Expected behavior
TLSv1.3 handshake should complete successfully.

Additional context
As a workaround, explicitly configuring the tls client binding version to use TLSv1.2 prevents the stall.

SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3

See https://bugs.openjdk.org/browse/JDK-8240871 for details.

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions