[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tomcat-user
Subject:    Re: [ANN] Apache Tomcat 8.0.35 available
From:       Christopher Schultz <chris () christopherschultz ! net>
Date:       2016-05-27 17:39:02
Message-ID: f7197e9f-2af8-17e4-4b78-ff4945bca148 () christopherschultz ! net
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

David,

On 5/25/16 2:05 PM, David Wall wrote:
> Does anybody know if the AES+GCM bug that causes a JVM Crash (I
> believe only under JDK 8) when running TLS in Tomcat using Java's
> JSSE has been fixed?  I doubt this is a Tomcat issue, but since the
> bug likely only appears for uses of TLS's AES+GCM in Tomcat, I hope
> someone here may know the details.  I can't seem to track the fix
> (it's a rather old bug considering the severity of a JVM crash just
> using TLS) in Java.

Do you have a reference for such a crash? Are you talking about this one
?

https://bugs.openjdk.java.net/browse/JDK-8068663

I don't have an OpenJDK account, so I can't (currently) see the status
of the bug that one claims to duplicate.

Since you are using JSSE, Tomcat is using 100% Java code, so the crash
is squarely a JVM bug.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=DjPU
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

[prev in list] [next in list] [prev in thread] [next in thread]