server falls down when some tls connections finished without full completed handshake about tigase-server HOT 7 CLOSED

We've reviewed the code and your logs and improved handling of this use case (when the TLS handshake is not ready while the server wants to send data).

In the linked commit, there is a possible fix, which we are going to check before merging it to the next version (8.2.0) as current version 8.1.0 is already being prepared for a release.

from tigase-server.

Could you tell us at least the version of Tigase XMPP Server which you are running? We need to have the exact same source code to check the stack trace and review possible issues.

from tigase-server.

tigase server 7.1.1

from tigase-server.

@stefandt were you able to reproduce it with the current stable, i.e. 8.0.0?

from tigase-server.

Sorry, I can not. This is a production environment.
In 8.0.0 we have 1000 cycles (100000 -> 1000). Perhaps this will have less effect on the server.
In any case, may be we have a vulnerability to attack. (case b)

P.S. in our case 20 cycles are almost insensible.

from tigase-server.

I think that it is important to release a 8.1.1 with this fix, no?

from tigase-server.

In version 8.0.0 there was an improvement already in place so the impact of that to 8.1.0 is very limited. Due to that and severity of change, additional improvement was done in 8.2.0-SNAPSHOT and may be released at some point in 8.1.1 when it will be verified to work properly.

So there is no need to release this as a bugfix in 8.1.1 at this point.

from tigase-server.