On 30/04/18 01:48, 旭东 胡 wrote: > Hi, > > I met a weird issue during setting up tomcat 8.5 with Http11Nio2Protocol > connector and OpenSSLImplementation. The issue is that a request would be > timeout using apache HttpClient and client certificate after serval previous > requests. It also happens with RestAssured and SoapUI. Please note it works > fine for first several requests and then failed with timeout. > > However, this issue is not observed when JMeter, tried both JAVA and non-JAVA > implementation, and insomnia REST client being used. I used a static page to > rule out application factors. Also Http11NioProtocol works fine for all above > clients. The only thing I changed for Http11NioProtocol is to specify > protocol="org.apache.coyote.http11.Http11NioProtocol” instead of > protocol="org.apache.coyote.http11.Http11Nio2Protocol”. Also, I have another > connector configured not checking client certificate. This one also works > fine regardless of Http11NioProtocol or Http11Nio2Protocol being used. > > Would you please help to identify if I have anything wrong in my > configuration? I tried to set the log level to fine. But I did not find > anything useful. Please help.
8.5.31 fixes an error in this area that might be relevant. The release vote for 8.5.31 is currently in progress. Details on the dev@ list. If you could download the 8.5.31 release candidate and test against that, that would be helpful. If that doesn't work then we'll need the following (again with 8.5.31 so we are testing the latest code): Enable debug logging for the I/O layer: org.apache.tomcat.util.net.level=FINE Enable TLS debug logging for the client: -Djavax.net.debug=all Recreate the problem. Provide us with: - the logs for the 30s before the error and 5s after it - the point in the logs where the error occurred Thanks, Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
