Openssl and tls 1.2

[Somshekar C Kadam]

Thanks Viktor for clarification

Regards
Somshekar C Kadam
9036660538


On Wed, Aug 14, 2019 at 9:43 AM Viktor Dukhovni <openssl-users at dukhovni.org>
wrote:

> Java's TLS library is not OpenSSL.  This is not the right list
> for help with TLS in JDK8.  Speculatively, the timeout might be
> related to IPv6 being enabled on the board with JDK8 and Linux 4.x.
> Perhaps you're trying the IPv6 address, timing out, and then failing
> over to IPv4.  Or some middle-box is choking on larger client hellos.
> You'll need to analyze a packet capture.
>
> > On Aug 14, 2019, at 1:29 PM, Somshekar C Kadam <somkadam76 at gmail.com>
> wrote:
> >
> > Hi ,
> > we are running java 1.6 (older build) and java 1.8(newer build) on the
> same arm target board with different builds.
> > On 1.6 java we have Linux Kernel 2.6.35 and with Java 1.8 Linux kernel
> 4.x. version. so 2 environments and 2 use cases newer and older build.
> > while we access https website link
> https://transparencyreport.google.com/https/overview?hl=en
> >
> > we see it takes less than 2 seconds using java 1.6. (older build)
> > we see it takes 10 seconds using java 1.8 (newer build)
> >
> > On Java 1.8 did try disabling GCM ciphers and trying still we get the
> same 10 seconds delay.
> >
> > Attaching log of tls handshake for both. Not sure its to do with tls,
> may be java is causing the delay.
> >
> > I am not sure, please provide any pointers or feedback to rootcause it
> that will help to understand why we get 10seconds delay.
> >
> > One more info if just use curl on on newer build setup, it works fine
> within 2 seconds to access the https link.
>
> Curl may well be using OpenSSL, but that's not where you're seeing
> a problem, so the help you'll get on this list is rather limited.
> Try wireshark or similar.
>
> --
>         Viktor.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190814/4046cbf3/attachment.html>