Groups keyboard shortcuts have been updated
Dismiss
See shortcuts

SSLException: closing inbound before receiving peer's close_notify

83 views
Skip to first unread message

Brad Wood

unread,
Oct 28, 2022, 5:41:34 PM10/28/22
to Undertow Dev
I've noticed for a while that when the io.undertow.request.io logger is set to trace, I see the following exception in my logs.  It happens when I hit a page and then let the browser (Chrome) site for a minute or two until the TCP connection times out (goes into TIMED_WAIT status).  

Is this normal?  When I Google this error, I see a lot of bug trackers where it's reported as a bug in the library that's using SSL. I'm testing on Undertow 2.2.19.Final and Java 11.0.17+8 (Adopt)

[TRACE] io.undertow.request.io: Exception closing read side of SSL channel
javax.net.ssl.SSLException: closing inbound before receiving peer's close_notify
at sun.security.ssl.Alert.createSSLException(Unknown Source)
at sun.security.ssl.Alert.createSSLException(Unknown Source)
at sun.security.ssl.TransportContext.fatal(Unknown Source)
at sun.security.ssl.TransportContext.fatal(Unknown Source)
at sun.security.ssl.TransportContext.fatal(Unknown Source)
at sun.security.ssl.SSLEngineImpl.closeInbound(Unknown Source)
at io.undertow.protocols.ssl.SNISSLEngine.closeInbound(SNISSLEngine.java:116)
at io.undertow.protocols.ssl.SslConduit.notifyReadClosed(SslConduit.java:636)
at io.undertow.protocols.ssl.SslConduit.doUnwrap(SslConduit.java:758)
at io.undertow.protocols.ssl.SslConduit.read(SslConduit.java:587)
at io.undertow.conduits.IdleTimeoutConduit.read(IdleTimeoutConduit.java:202)
at org.xnio.conduits.ConduitStreamSourceChannel.read(ConduitStreamSourceChannel.java:127)
at io.undertow.server.protocol.http.HttpReadListener.handleEventWithNoRunningRequest(HttpReadListener.java:158)
at io.undertow.server.protocol.http.HttpReadListener.handleEvent(HttpReadListener.java:136)
at io.undertow.server.protocol.http.HttpReadListener.handleEvent(HttpReadListener.java:59)
at org.xnio.ChannelListeners.invokeChannelListener(ChannelListeners.java:92)
at org.xnio.conduits.ReadReadyHandler$ChannelListenerHandler.readReady(ReadReadyHandler.java:66)
at io.undertow.protocols.ssl.SslConduit$SslReadReadyHandler.readReady(SslConduit.java:1273)
at org.xnio.nio.NioSocketConduit.handleReady(NioSocketConduit.java:89)
at org.xnio.nio.WorkerThread.run(WorkerThread.java:591)

Thanks!

~Brad

Developer Advocate
Ortus Solutions, Corp 

ColdBox Platform: http://www.coldbox.org 

Brad Wood

unread,
Dec 23, 2022, 1:23:37 PM12/23/22
to Undertow Dev
Any feedback on this question?

Flavia Rainone

unread,
Dec 23, 2022, 11:36:55 PM12/23/22
to Undertow Dev
Hi Brad,

This is another message that went unnoticed while I was on PTO. Once more, sorry for that.

I would need to look deeper into the error for the particular case. The one in XNIO was solved a while ago, and it could be the case that we need to fix in Undertow as well.

 Can you please open a Jira and, if possible, provide a reproducer? Please, send the Jira number here after you're done and I'll follow up in the Jira.

Thanks!

Brad Wood

unread,
Dec 27, 2022, 3:04:28 PM12/27/22
to Flavia Rainone, Undertow Dev

Thanks!

~Brad

Developer Advocate
Ortus Solutions, Corp 

ColdBox Platform: http://www.coldbox.org 


--
You received this message because you are subscribed to the Google Groups "Undertow Dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to undertow-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/undertow-dev/53b5eb28-86da-4196-b7b8-e6a3818cee4an%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages