Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 364614 - SSL connection fails when using faster cipher suites like RC4-MD5/ RC4-SHA/ AES128-SHA
Summary: SSL connection fails when using faster cipher suites like RC4-MD5/ RC4-SHA/ A...
Status: CLOSED INVALID
Alias: None
Product: Jetty
Classification: RT
Component: server (show other bugs)
Version: unspecified   Edit
Hardware: PC Linux
: P3 normal (vote)
Target Milestone: 7.5.x   Edit
Assignee: Greg Wilkins CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-11-23 11:06 EST by Daniel CLA
Modified: 2011-11-24 11:56 EST (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel CLA 2011-11-23 11:06:19 EST 
Build Identifier: jetty-7.5.4.v20111024

uname -a: Linux 2.6.18-238.12.1.el5 #1 SMP Tue May 31 13:22:04 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux
java -version: "1.6.0_29"
That's standart Jetty7 setup with SSL. 
As testing with ab (apache benchmark tool) with these options:
ab -n 100 -c 1 -f TLS1 -Z RC4-MD5 https://remote/app/header.jpg
A lot of failed connections happen ("SSL read failed - closing connection").
This test is made to remote machine, as I test on local one I haven't reproduced it.
The second major thing is that the requested file should be at about 100-200Kb. As I tested with 20Kb problem doesn't happen, neither with 400Kb file.
There is the same problem when using RC4-SHA and AES128-SHA.
As I tested same request to jetty 6 setup - there are no failing connections.

Reproducible: Always

Steps to Reproduce:
1.execute to remote machine "ab -n 100 -c 1 -f TLS1 -Z RC4-MD5 https://remote/app/header.jpg" where header.jpg is between 100 and 200 Kb.
Comment 1 Daniel CLA 2011-11-24 11:56:18 EST 
Ok, this seems to be ab bug.
https://issues.apache.org/bugzilla/show_bug.cgi?id=49382
sorry for bothering.