SSLEngine.closeInbound() should throw SSLException if no close notification was received
Open
bug
- Dominant language
- Java
- Stars
- 1.4k
- Forks
- 326
- Avg merge
- 16h 22m
- Merged PRs (30d)
- 17
Description
During testing conscrypt in the netty testsuite we encountered that Conscrypt does not correct implement SSLEngine.closeInbound().
See https://github.com/netty/netty/pull/10211/files#diff-08da41869dfc1d842df441440b1c605bR2184
If you call `closeInbound()` and you did not receive a proper SSL/TLS close notification before it must throw an `SSLException`.
See also https://docs.oracle.com/javase/7/docs/api/javax/net/ssl/SSLEngine.html#closeInbound()
Contributor guide
Assessment
This issue has not been assessed yet.