See "Failed to clean up SSLEngine." when making WS call

[chris ciotti]

Play Version: 2.3.3

SBT: 0.13.5

java version 1.7.0_67

When executing a WS post, I receive this message:

[debug] o.j.n.h.s.SslHandler - Failed to clean up SSLEngine.
javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
 at sun.security.ssl.Alerts.getSSLException(Alerts.java:208) ~[na:1.7.0_67]
 at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1619) ~[na:1.7.0_67]
 at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1587) ~[na:1.7.0_67]
 at sun.security.ssl.SSLEngineImpl.closeInbound(SSLEngineImpl.java:1517) ~[na:1.7.0_67]
 at org.jboss.netty.handler.ssl.SslHandler.closeEngine(SslHandler.java:657) [netty-3.9.3.Final.jar:na]

I thought this issue was fixed in 2.3.3 (I haven't looked through the code yet). Is anyone else experiencing this issue? 

Chris

[Will Sargent]

That's not an issue, that's a symptom.  The SSLEngine in JSSE can change for many different reasons, like if the network connection hiccups or the handshake fails.  You need to scroll up and see if there's any previous errors.

Will Sargent

Consultant, Professional Services

Typesafe, the company behind Play Framework, Akka and Scala

--
You received this message because you are subscribed to the Google Groups "play-framework" group.
To unsubscribe from this group and stop receiving emails from it, send an email to play-framewor...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[chris ciotti]

I don't see any other errors and I have all the debugging turned on. This happens on every request to a particular host. 

[Will Sargent]

JSSE debugging writes directly to System.out.println, so if you're looking at a log file you may not catch it.  I would hit that URL with Wireshark on, and see where it fails.

Also see http://www.smartjava.org/content/how-analyze-java-ssl-errors

and the Oracle documentation:

http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/JSSERefGuide.html#Debug

http://docs.oracle.com/javase/8/docs/technotes/guides/security/troubleshooting-security.html

http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/ReadDebug.html

Will Sargent

Consultant, Professional Services

Typesafe, the company behind Play Framework, Akka and Scala