JDK-8328608 : Multiple NewSessionTicket support for TLS
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Priority: P2
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2024-03-20
  • Updated: 2025-05-19
  • Resolved: 2024-08-28
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 24
24 b13Fixed
Related Reports
Blocks :  
JDK-8334670 - SSLSocketOutputRecord buffer miscalculation
CSR :  
JDK-8333581 - Multiple NewSessionTicket support for TLS
Relates :  
JDK-8348326 - MultiNSTParallel fails with "'MultiNST PSK' missing from stderr"
Relates :  
JDK-8357033 - Reduce stateless session ticket size
Relates :  
JDK-8348309 - MultiNST tests need more debugging and timing
Relates :  
JDK-8334670 - SSLSocketOutputRecord buffer miscalculation
Sub Tasks
JDK-8339518 :  
Release Note: Configurable New Session Tickets Count for TLSv1.3 - Resolved
Description
A TLS 1.3 client is not able to resume sessions by accepting and using multiple tickets across multiple threads. Only single thread resumption works.

This is mainly a placeholder issue for now - more details will be added later as the issue is investigated.
Comments
I'll filed a bug. There appears to be a test issue that is very intermittent and dependent on certain systems.
22-01-2025
Unfortunately the MultiNSTParallel.java test fails 1-2 times per week on some of our Linux ppc64le test machines with errors like these : java.lang.Exception: java.lang.RuntimeException: 'MultiNST PSK' missing from stderr at MultiNSTParallel.main(MultiNSTParallel.java:154) at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104) at java.base/java.lang.reflect.Method.invoke(Method.java:565) at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138) at java.base/java.lang.Thread.run(Thread.java:1447) Caused by: java.lang.RuntimeException: 'MultiNST PSK' missing from stderr at jdk.test.lib.process.OutputAnalyzer.stderrShouldContain(OutputAnalyzer.java:283) at MultiNSTParallel.main(MultiNSTParallel.java:123) ... 4 more I add a longer log part of a failing test to this JBS issue . I can file a new JBS issue for this if it is desired.
22-01-2025
Changeset: 0c2b1758 Branch: master Author: Anthony Scarpino <ascarpino@openjdk.org> Date: 2024-08-28 17:24:33 +0000 URL: https://git.openjdk.org/jdk/commit/0c2b175898d13b58ffe56e2f9cbc9d88173a61cf
28-08-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/19465 Date: 2024-05-29 18:53:55 +0000
09-07-2024
Looking into other caching options for session management and the threading complexities that could bring.
04-04-2024