shibboleth-dev - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat

From: Kaspar Brand <>
To:
Subject: Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat
Date: Fri, 06 Feb 2009 13:43:05 +0100

> I had tested with jdk 1.6.0u6. The latest 1.6.0u12 works fine.

Ok, then it's this bug here (from
http://java.sun.com/javase/6/webnotes/6u12.html):

> 6728126 jsse runtime Parsing Extensions in Client Hello
> message is done in a wrong way

The bug is not public, but OpenJDK is, fortunately enough ;-)

http://hg.openjdk.java.net/jdk7/tl/jdk/rev/16efbe49c725

(Previously JSSE was stumbling over an empty TLS ticket extension - but
the latter is perfectly legal according to RFC 4507/5077, when
negotiating a new TLS session.)

Kaspar

OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/04/2009
- Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Kaspar Brand, 02/05/2009
  - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
    - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Kaspar Brand, 02/05/2009
      - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
      - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
- Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/05/2009
  - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
    - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/05/2009
      - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/06/2009
        
        Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Kaspar Brand, 02/06/2009
    - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/05/2009
      - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009

List archive

Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat