Mailing-List: contact commits-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@activemq.apache.org
Date: Wed, 3 Apr 2013 14:33:17 +0000 (UTC)
From: "Hiram Chirino (JIRA)" <jira@apache.org>
To: commits@activemq.apache.org
Message-ID: <JIRA.12628016.1358417987422.99305.1364999597345@arcas>
In-Reply-To: <JIRA.12628016.1358417987422@arcas>
References: <JIRA.12628016.1358417987422@arcas>
Subject: [jira] [Commented] (APLO-287) Weird errors with SSL + Java 7
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/APLO-287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13620954#comment-13620954 ] 

Hiram Chirino commented on APLO-287:
------------------------------------

Folks in the post in the previous thread reported that disabling the Diffie-Hellman cypher suite lets them work around the issue /w Java 7.  I've just deployed a new build of Apollo which supports disabling the Diffie-Hellman cypher suite.

Lionel, if you get a chance could you try out the new snapshot build on Java 7 and update the connector configuration similar to the following:

connector id="ssl" bind="ssl://0.0.0.0:61614?disabled_cypher_suites=DHE" /> 

Let me know if disabling the DHE cyphers helps out on Java 7.
                
> Weird errors with SSL + Java 7
> ------------------------------
>
>                 Key: APLO-287
>                 URL: https://issues.apache.org/jira/browse/APLO-287
>             Project: ActiveMQ Apollo
>          Issue Type: Bug
>         Environment: apollo-99-trunk-20130115.031918-158
>            Reporter: Lionel Cons
>            Assignee: Hiram Chirino
>
> When running simple functionality tests (that use STOMP+SSL) against apollo-99-trunk-20130115.031918-158, everything works fine when the broker runs on top of a Java 6 JVM.
> However, the exact same tests again the exact same version of Apollo fail randomly when the broker runs on top of a Java 7 JVM. For the record, we use: Java HotSpot(TM) 64-Bit Server VM 1.7.0_10 (Oracle Corporation).
> Here is what the broker logs:
> 2013-01-17 11:09:09,663 Shutting connection 'null'  down due to: java.io.EOFException: Peer disconnected
> 2013-01-17 11:09:09,764 Shutting connection 'null'  down due to: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
> 2013-01-17 11:11:16,110 Shutting connection 'null'  down due to: javax.net.ssl.SSLHandshakeException: Invalid padding
> 2013-01-17 11:13:54,671 Shutting connection 'null'  down due to: javax.net.ssl.SSLHandshakeException: Invalid padding
> [...]
> First of all, is Apollo supported on Java 7?
> If yes, any idea what could cause these failures on Java 7?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira