Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Jaxrs security not getting SSL Socket Factory updates #13027

Closed
WhiteCat22 opened this issue Jul 14, 2020 · 1 comment
Closed

Jaxrs security not getting SSL Socket Factory updates #13027

WhiteCat22 opened this issue Jul 14, 2020 · 1 comment
Assignees
@WhiteCat22
Labels
bug This bug is not present in a released version of Open Liberty in:JAX-RS release bug This bug is present in a released version of Open Liberty release:20009 team:Wendigo West

Comments

@WhiteCat22
Copy link
Member

Jaxrs caches the SSLSocketFactory in com.ibm.ws.jaxrs20.appsecurity.component.SSLSupportService

When the underlying SocketFactory updates, Jaxrs maintains a copy of the out of date SocketFactory, meaning, Jaxrs won't handly they updates until the server is restarted.
@WhiteCat22 WhiteCat22 added bug This bug is not present in a released version of Open Liberty in:JAX-RS team:Wendigo West release bug This bug is present in a released version of Open Liberty labels Jul 14, 2020
@WhiteCat22 WhiteCat22 self-assigned this Jul 14, 2020
@WhiteCat22 WhiteCat22 mentioned this issue Jul 14, 2020
Merged
@WhiteCat22
Copy link
Member Author

I removed the cached SSLSocketFactory and confirmed that there is no performance regression with @dettmoney
SSLSocketFactory caches everything internally, so our caching of the SSLSocketFactory is redundant and causes us to miss updates.

@WhiteCat22 WhiteCat22 mentioned this issue Nov 11, 2020
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@WhiteCat22 WhiteCat22

Labels
bug This bug is not present in a released version of Open Liberty in:JAX-RS release bug This bug is present in a released version of Open Liberty release:20009 team:Wendigo West
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@LibbyBot @WhiteCat22