Bug 64486

Summary:	Receiving null/empty request body when SSL enabled
Product:	Tomcat 9	Reporter:	vinkvii
Component:	Connectors	Assignee:	Tomcat Developers Mailing List <dev>
Status:	RESOLVED DUPLICATE
Severity:	major
Priority:	P2
Version:	9.0.31
Target Milestone:	-----
Hardware:	HP
OS:	Linux

Description vinkvii 2020-06-01 09:17:23 UTC

I am posting large body(~12-18kb) to the REST . The endpoint is receiving null/empty Request Body randomly(not with every request).

When I am facing this issue:

1. When SSL(self-signed) is enabled in spring-boot(https://server:port/{endpoint})
2. The issue is not consistent , it happens randomly(not every request)
3. Issue does not occur when the post body size is very low.
4. Same request works for HTTP consistently but not with HTTPS

Project Details:
1. Spring Boot 2.2.5 with Tomcat as embedded server
2. TLSV12
3. OpenJDK8
4. Certificate is Selfsigned

What we have tried to debug

1. Decrypted tcpdump shows the body is present.
2. Tried changing the JVM, spring boot server configuration (heapsize,stacksize, ciphers change )
3. Checked the logs, have not found anything concrete.

Comment 1 mgrigorov 2020-06-01 11:38:13 UTC

There is no proof is a bug in the description.
Please use users@tomcat.apache.org for support!

Comment 2 vinkvii 2020-06-02 09:57:45 UTC

Hi

It is not an invalid issue. We updated the tomcat jar 9.0.31 to 9.0.35 in our spring boot project lib directory and the issue is resolved now.

It seems the issue could be related to EOF return before the whole read.

Fix : Update to latest Version of Tomcat 9.0.35.

Marking it as Fixed in updated Version.





Thanks

Comment 3 vinkvii 2020-06-02 10:00:32 UTC

Additional Comments:

The issue could be related to the bug:
https://bz.apache.org/bugzilla/show_bug.cgi?id=64195 

Thanks

Comment 4 mgrigorov 2020-06-02 10:29:22 UTC


*** This bug has been marked as a duplicate of bug 64195 ***