Mailing-List: contact dev-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpComponents Project" <dev@hc.apache.org>
Received-SPF: pass (athena.apache.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: SSL Bad record Mac
Date: Fri, 20 Nov 2009 18:36:59 -0800
Message-ID: 
 <1AA95300F8CC2D4583ACBC20FDD3B13D0D6587B1@hq-exch-01.castiron.corp>
In-Reply-To: <op.u3my3by56mezs6@gergo>
Thread-Topic: SSL Bad record Mac
Thread-Index: AcppADLWap/xr/EnTgu6brcgaDHDrABUvPcg
References: <f0de55c00911180103m4eaabb54g27960ca3cecf8745@mail.gmail.com>
 <1258545588.5747.22.camel@ubuntu> <op.u3my3by56mezs6@gergo>
From: "Pankaj Arora" <parora@castiron.com>
To: "HttpComponents Project" <dev@hc.apache.org>

HI,
I am using Http commons 3.0.1 to talk to my server.
I am facing an issue where after every few https calls I see this error:

javax.net.ssl.SSLException: bad record MAC

        at
com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)

        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591
)

        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1549
)

        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java
:850)

        at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.
java:746)

        at
com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:75)

        at
java.io.BufferedInputStream.fill(BufferedInputStream.java:218)

        at
java.io.BufferedInputStream.read(BufferedInputStream.java:237)

        at
org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:77)

        at
org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:105)

        at
org.apache.commons.httpclient.HttpConnection.readLine(HttpConnection.jav
a:1115)


Sometime there is no error for 100 of calls and sometimes it errors in
6-7 calls.
Any ideas what might be wrong or if there is some existing bug in Http
commons or even Sun?

Thanks,
Pankaj Arora

-----Original Message-----
From: Kiss Gergely [mailto:kiss.gergely@gmail.com]=20
Sent: Thursday, November 19, 2009 1:53 AM
To: HttpComponents Project
Subject: Re: NegotiateAuth for HttpClient 4.x

Oleg,

Because we required a stable version of HttpComponents, the code was
based =20
on 4.0.
Doh... I should have looked at the JIRA first :)

As for digging in the current docs and trunk... sorry, but I'm already =20
promising my free time (and future free time) to everybody, so maybe
some =20
other day.

Best regards
Gergely Kiss


> Gergely,
>
> Support for SPNEGO/Kerberos authentication scheme has been recently
> added to the SVN trunk (See HTTPCLIENT-523 in JIRA for details). Did
you
> base your code on 4.0 release or the latest dev snapshot? If not, it
> would be great if you could incorporate the latest changes into your
> code line and submit your enhancements as a patch against SVN trunk.
>
> There is also a fairly extensive documentation of how current SPNEGO
> support works in the HttpClient tutorial but you will have to generate
> that tutorial manually from the source code.
>
> Please also consider subscribing the the list so I would not have mod
> your messages in manually.
>
> Cheers
>
> Oleg

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org