directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Trustin Lee (JIRA)" <j...@apache.org>
Subject [jira] Resolved: (DIRMINA-85) SSLFilter race condition
Date Thu, 13 Oct 2005 16:12:04 GMT
     [ http://issues.apache.org/jira/browse/DIRMINA-85?page=all ]
     
Trustin Lee resolved DIRMINA-85:
--------------------------------

    Fix Version: 0.8
     Resolution: Fixed

We've discussed a lot on this issue and finally decided to use a session attribute key that
temporarilly disables encryption:

http://www.nabble.com/-mina-SSLFilter-race-condition%3A-Take-2-t398500.html

Our discussion is not yet in the ASF official ML archive site, but you'll get to see it soon:

http://mail-archives.apache.org/mod_mbox/directory-dev/200510.mbox/browser

This fix applies to both 0.7 and 0.9 stream.

> SSLFilter race condition
> ------------------------
>
>          Key: DIRMINA-85
>          URL: http://issues.apache.org/jira/browse/DIRMINA-85
>      Project: Directory MINA
>         Type: Bug
>     Versions: 0.9
>  Environment: Java 5, FC3 x86-64
>     Reporter: Vinod Panicker
>     Assignee: Trustin Lee
>     Priority: Blocker
>      Fix For: 0.8

>
> I'm facing a race condition in SSLFilter.  Basically I've done a "STARTTLS" kind of implementation
in which SSL is enabled over an existing plain-text connection.  The server tells the client
to start the SSL negotiation via the application protocol and puts an SSLFilter over the connection
to handle the handshake.
> The race condition occurs when the client sends the SSL handshake even before the SSLFilter
is implemented on the connection.  This data is sent to the IoHandler and causes all sorts
of problems.  Ultimately the session is in limbo - it has to be closed.
> A solution would be to stall the processing of incoming/outgoing data on the session
till the filter is implemented successfully.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


Mime
View raw message