java - Tomcat/合流 : very long TLS handshake at start-6ren

java - Tomcat/合流 : very long TLS handshake at start

转载作者：行者123 更新时间：2023-11-28 22:06:03

我在 Ubuntu 16.04 上运行 Confluence。它通过 HTTP:8090 和 HTTPS:8443 运行良好。证书来自 Let's Encrypt。来自浏览器的连接以及 curl -iv https://domain.io:8443 或 openssl s_client -connect domain.io:8443 -msg 也工作正常。

但是，在启动 Tomcat 服务器后，需要很长时间(几分钟)才能进行 TLS 握手。

这是 openssl 输出:

# strace -o outputfile.txt -f -tt openssl s_client -connect domain.io:8443 -msg
CONNECTED(00000003)
>>> TLS 1.2  [length 0005]
    16 03 01 01 2c
>>> TLS 1.2 Handshake [length 012c], ClientHello
    01 00 01 28 03 03 cc d6 05 e6 2a f3 33 39 fe 5d
    ce 33 e9 21 df 03 0b f4 3a b4 54 02 d2 d9 e9 68
    b3 33 d7 7d 8e 54 00 00 aa c0 30 c0 2c 33 28 c0
    24 c0 14 c0 0a 00 a5 00 a3 00 a1 00 9f 00 6b 00
    6a 00 69 00 68 00 39 00 38 00 37 00 36 00 88 00
    87 00 86 00 85 c0 32 c0 2e c0 2a c0 26 c0 0f c0
    05 33 9d 33 3d 00 35 00 84 c0 2f c0 2b c0 27 c0
    23 c0 13 c0 09 00 a4 00 a2 00 a0 00 9e 00 67 00
    40 00 3f 00 3e 00 33 00 32 00 31 00 30 00 9a 00
    99 00 98 00 97 00 45 00 44 00 43 00 42 c0 31 c0
    2d 33 29 c0 25 c0 0e c0 04 33 9c 00 3c 00 2f 00
    96 00 41 c0 11 c0 07 c0 0c c0 02 00 33 00 04 c0
    12 c0 08 00 16 00 13 00 10 00 0d 33 0d c0 03 00
    0a 00 ff 01 00 00 55 00 0b 00 04 03 00 01 02 00
    0a 00 1c 33 1a 00 17 00 19 00 1c 00 1b 00 33 00
    1a 00 16 00 0e 00 0d 00 0b 00 0c 00 09 00 0a 00
    23 00 00 00 0d 00 20 00 1e 06 01 06 02 06 03 05
    01 05 02 33 03 04 01 04 02 04 03 03 01 03 02 03
    03 02 01 02 02 02 03 00 0f 00 01 01

这是到那时为止的 strace 输出:

12432 18:37:50.784832 execve("/usr/bin/openssl", ["openssl", "s_client", "-connect", "domain.io:8443", "-msg"], [/* 17 vars */]) = 0
12432 18:37:50.785956 brk(NULL)         = 0xe9d000
12432 18:37:50.786920 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.787529 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.787670 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.787814 fstat(3, {st_mode=S_IFREG|0644, st_size=34747, ...}) = 0
12432 18:37:50.787932 mmap(NULL, 34747, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc6f3ddc000
12432 18:37:50.788056 close(3)          = 0
12432 18:37:50.788136 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.788245 open("/lib/x86_64-linux-gnu/libssl.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.788339 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320^\1\0\0\0\0\0"..., 832) = 832
12432 18:37:50.788432 fstat(3, {st_mode=S_IFREG|0644, st_size=428384, ...}) = 0
12432 18:37:50.788509 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc6f3ddb000
12432 18:37:50.788930 mmap(NULL, 2523600, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc6f3957000
12432 18:37:50.789114 mprotect(0x7fc6f39b5000, 2097152, PROT_NONE) = 0
12432 18:37:50.789271 mmap(0x7fc6f3bb5000, 45056, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5e000) = 0x7fc6f3bb5000
12432 18:37:50.789494 close(3)          = 0
12432 18:37:50.789627 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.789743 open("/lib/x86_64-linux-gnu/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.789857 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\36\6\0\0\0\0\0"..., 832) = 832
12432 18:37:50.790026 fstat(3, {st_mode=S_IFREG|0644, st_size=2361856, ...}) = 0
12432 18:37:50.790101 mmap(NULL, 4471680, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc6f3513000
12432 18:37:50.790197 mprotect(0x7fc6f372d000, 2093056, PROT_NONE) = 0
12432 18:37:50.790347 mmap(0x7fc6f392c000, 163840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x219000) = 0x7fc6f392c000
12432 18:37:50.790471 mmap(0x7fc6f3954000, 11136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc6f3954000
12432 18:37:50.790624 close(3)          = 0
12432 18:37:50.790844 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.790938 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.791013 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\t\2\0\0\0\0\0"..., 832) = 832
12432 18:37:50.791100 fstat(3, {st_mode=S_IFREG|0755, st_size=1868984, ...}) = 0
12432 18:37:50.791171 mmap(NULL, 3971488, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc6f3149000
12432 18:37:50.791282 mprotect(0x7fc6f3309000, 2097152, PROT_NONE) = 0
12432 18:37:50.791358 mmap(0x7fc6f3509000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c0000) = 0x7fc6f3509000
12432 18:37:50.791449 mmap(0x7fc6f350f000, 14752, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc6f350f000
12432 18:37:50.791580 close(3)          = 0
12432 18:37:50.792338 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.793048 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.793217 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\r\0\0\0\0\0\0"..., 832) = 832
12432 18:37:50.793302 fstat(3, {st_mode=S_IFREG|0644, st_size=14608, ...}) = 0
12432 18:37:50.793373 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc6f3dda000
12432 18:37:50.793492 mmap(NULL, 2109680, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc6f2f45000
12432 18:37:50.793639 mprotect(0x7fc6f2f48000, 2093056, PROT_NONE) = 0
12432 18:37:50.793885 mmap(0x7fc6f3147000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc6f3147000
12432 18:37:50.794220 close(3)          = 0
12432 18:37:50.794573 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc6f3dd9000
12432 18:37:50.794670 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc6f3dd8000
12432 18:37:50.794753 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc6f3dd7000
12432 18:37:50.794858 arch_prctl(ARCH_SET_FS, 0x7fc6f3dd8700) = 0
12432 18:37:50.795171 mprotect(0x7fc6f3509000, 16384, PROT_READ) = 0
12432 18:37:50.795279 mprotect(0x7fc6f3147000, 4096, PROT_READ) = 0
12432 18:37:50.796859 mprotect(0x7fc6f392c000, 114688, PROT_READ) = 0
12432 18:37:50.797329 mprotect(0x7fc6f3bb5000, 16384, PROT_READ) = 0
12432 18:37:50.797843 mprotect(0x682000, 4096, PROT_READ) = 0
12432 18:37:50.797964 mprotect(0x7fc6f3de5000, 4096, PROT_READ) = 0
12432 18:37:50.798043 munmap(0x7fc6f3ddc000, 34747) = 0
12432 18:37:50.798606 brk(NULL)         = 0xe9d000
12432 18:37:50.798677 brk(0xebe000)     = 0xebe000
12432 18:37:50.799562 rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7fc6f317e4b0}, {SIG_DFL, [], 0}, 8) = 0
12432 18:37:50.811923 open("/usr/lib/ssl/openssl.cnf", O_RDONLY) = 3
12432 18:37:50.812154 fstat(3, {st_mode=S_IFREG|0644, st_size=10835, ...}) = 0
12432 18:37:50.812297 read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
12432 18:37:50.812531 read(3, "Netscape crash on BMPStrings or "..., 4096) = 4096
12432 18:37:50.812842 read(3, " this to avoid interpreting an e"..., 4096) = 2643
12432 18:37:50.813228 read(3, "", 4096) = 0
12432 18:37:50.813305 close(3)          = 0
12432 18:37:50.813398 sysinfo({uptime=344186, loads=[48512, 15520, 9856], totalram=8172093440, freeram=2351210496, sharedram=1317388288, bufferram=179171328, totalswap=0, freeswap=0, procs=338, totalhigh=0, freehigh=0, mem_unit=1}) = 0
12432 18:37:50.814123 rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7fc6f317e4b0}, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7fc6f317e4b0}, 8) = 0
12432 18:37:50.814360 brk(0xedf000)     = 0xedf000
12432 18:37:50.815294 getuid()          = 0
12432 18:37:50.815461 geteuid()         = 0
12432 18:37:50.815541 getgid()          = 0
12432 18:37:50.815602 getegid()         = 0
12432 18:37:50.815655 getuid()          = 0
12432 18:37:50.815795 geteuid()         = 0
12432 18:37:50.815858 getgid()          = 0
12432 18:37:50.815932 getegid()         = 0
12432 18:37:50.816038 stat("/root/.rnd", {st_mode=S_IFREG|0600, st_size=1024, ...}) = 0
12432 18:37:50.816213 open("/root/.rnd", O_RDONLY) = 3
12432 18:37:50.816320 fstat(3, {st_mode=S_IFREG|0600, st_size=1024, ...}) = 0
12432 18:37:50.816404 read(3, "\205\266ko\266\247g\304>\354eFU\25\342\2207R\361\vv\321\206\217\2\351\3520\211Z\22a"..., 4096) = 1024
12432 18:37:50.817225 read(3, "", 4096) = 0
12432 18:37:50.817289 close(3)          = 0
12432 18:37:50.817635 getpid()          = 12432
12432 18:37:50.817915 open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 3
12432 18:37:50.817996 fstat(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
12432 18:37:50.818060 poll([{fd=3, events=POLLIN}], 1, 10) = 1 ([{fd=3, revents=POLLIN}])
12432 18:37:50.818127 read(3, "\332\26\3509\255x\331\304;\16J\232b\2012\352'.\236N\322\326\253']j\370\301\346\340\5\315", 32) = 32
12432 18:37:50.818218 close(3)          = 0
12432 18:37:50.818284 getuid()          = 0
12432 18:37:50.818444 open("/usr/lib/ssl/cert.pem", O_RDONLY) = -1 ENOENT (No such file or directory)
12432 18:37:50.818660 open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.818841 fstat(3, {st_mode=S_IFREG|0644, st_size=242, ...}) = 0
12432 18:37:50.819179 read(3, "# Dynamic resolv.conf(5) file fo"..., 4096) = 242
12432 18:37:50.819264 read(3, "", 4096) = 0
12432 18:37:50.819320 close(3)          = 0
12432 18:37:50.819383 stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=242, ...}) = 0
12432 18:37:50.819457 open("/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.819540 fstat(3, {st_mode=S_IFREG|0644, st_size=242, ...}) = 0
12432 18:37:50.819601 read(3, "# Dynamic resolv.conf(5) file fo"..., 4096) = 242
12432 18:37:50.819684 read(3, "", 4096) = 0
12432 18:37:50.819803 close(3)          = 0
12432 18:37:50.819881 socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
12432 18:37:50.819963 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
12432 18:37:50.820080 close(3)          = 0
12432 18:37:50.820172 socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
12432 18:37:50.820318 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
12432 18:37:50.820394 close(3)          = 0
12432 18:37:50.820464 open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.820590 fstat(3, {st_mode=S_IFREG|0644, st_size=488, ...}) = 0
12432 18:37:50.820655 read(3, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 488
12432 18:37:50.820739 read(3, "", 4096) = 0
12432 18:37:50.820794 close(3)          = 0
12432 18:37:50.820871 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.820938 fstat(3, {st_mode=S_IFREG|0644, st_size=34747, ...}) = 0
12432 18:37:50.821092 mmap(NULL, 34747, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc6f3ddc000
12432 18:37:50.821168 close(3)          = 0
12432 18:37:50.821239 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.821331 open("/lib/x86_64-linux-gnu/libnss_dns.so.2", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.821470 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\17\0\0\0\0\0\0"..., 832) = 832
12432 18:37:50.821579 fstat(3, {st_mode=S_IFREG|0644, st_size=27000, ...}) = 0
12432 18:37:50.821644 mmap(NULL, 2121944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc6f2d3e000
12432 18:37:50.821763 mprotect(0x7fc6f2d43000, 2097152, PROT_NONE) = 0
12432 18:37:50.821874 mmap(0x7fc6f2f43000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fc6f2f43000
12432 18:37:50.822648 close(3)          = 0
12432 18:37:50.822841 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
12432 18:37:50.823136 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.823233 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P9\0\0\0\0\0\0"..., 832) = 832
12432 18:37:50.823687 fstat(3, {st_mode=S_IFREG|0644, st_size=101200, ...}) = 0
12432 18:37:50.823870 mmap(NULL, 2206280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc6f2b23000
12432 18:37:50.824015 mprotect(0x7fc6f2b3a000, 2097152, PROT_NONE) = 0
12432 18:37:50.824359 mmap(0x7fc6f2d3a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7fc6f2d3a000
12432 18:37:50.824631 mmap(0x7fc6f2d3c000, 6728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc6f2d3c000
12432 18:37:50.824732 close(3)          = 0
12432 18:37:50.824884 mprotect(0x7fc6f2d3a000, 4096, PROT_READ) = 0
12432 18:37:50.824998 mprotect(0x7fc6f2f43000, 4096, PROT_READ) = 0
12432 18:37:50.825064 munmap(0x7fc6f3ddc000, 34747) = 0
12432 18:37:50.825186 open("/etc/host.conf", O_RDONLY|O_CLOEXEC) = 3
12432 18:37:50.825297 fstat(3, {st_mode=S_IFREG|0644, st_size=103, ...}) = 0
12432 18:37:50.825379 read(3, "# The \"order\" line is only used "..., 4096) = 103
12432 18:37:50.825467 read(3, "", 4096) = 0
12432 18:37:50.825524 close(3)          = 0
12432 18:37:50.825658 stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=242, ...}) = 0
12432 18:37:50.825753 socket(PF_INET, SOCK_DGRAM|SOCK_NONBLOCK, IPPROTO_IP) = 3
12432 18:37:50.825849 connect(3, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("213.186.33.99")}, 16) = 0
12432 18:37:50.826029 poll([{fd=3, events=POLLOUT}], 1, 0) = 1 ([{fd=3, revents=POLLOUT}])
12432 18:37:50.826139 sendto(3, "\307\220\1\0\0\1\0\0\0\0\0\0\6domain\2io\0\0\1\0\1", 27, MSG_NOSIGNAL, NULL, 0) = 27
12432 18:37:50.826313 poll([{fd=3, events=POLLIN}], 1, 5000) = 1 ([{fd=3, revents=POLLIN}])
12432 18:37:50.826766 ioctl(3, FIONREAD, [43]) = 0
12432 18:37:50.826870 recvfrom(3, "\307\220\201\200\0\1\0\1\0\0\0\0\6domain\2io\0\0\1\0\1\300\f\0\1\0"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("213.186.33.99")}, [16]) = 43
12432 18:37:50.827044 close(3)          = 0
12432 18:37:50.827144 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3
12432 18:37:50.827228 setsockopt(3, SOL_SOCKET, SO_KEEPALIVE, [0], 4) = 0
12432 18:37:50.827585 connect(3, {sa_family=AF_INET, sin_port=htons(8443), sin_addr=inet_addr("1.1.1.1")}, 16) = 0
12432 18:37:50.827909 fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
12432 18:37:50.827996 write(1, "CONNECTED(00000003)\n", 20) = 20
12432 18:37:50.828121 select(4, [3], [3], NULL, NULL) = 1 (out [3])
12432 18:37:50.828331 write(3, "\26\3\1\1,\1\0\1(\3\3\223\25\210\2665`]KrPO\4YwK!$\16\303k\214"..., 305) = 305
12432 18:37:50.828465 write(1, ">>> TLS 1.2  [length 0005]\n", 27) = 27
12432 18:37:50.828567 write(1, "    16 03 01 01 2c\n", 19) = 19
12432 18:37:50.828648 write(1, ">>> TLS 1.2 Handshake [length 01"..., 49) = 49
12432 18:37:50.828733 write(1, "    01 00 01 28 03 03 93 15 88 b"..., 52) = 52
12432 18:37:50.828819 write(1, "    4f 04 59 77 4b 21 24 0e c3 6"..., 52) = 52
12432 18:37:50.828905 write(1, "    09 18 0b fb a2 e7 00 00 aa c"..., 52) = 52
12432 18:37:50.829003 write(1, "    24 c0 14 c0 0a 00 a5 00 a3 0"..., 52) = 52
12432 18:37:50.829088 write(1, "    6a 00 69 00 68 00 39 00 38 0"..., 52) = 52
12432 18:37:50.829171 write(1, "    87 00 86 00 85 c0 32 c0 2e c"..., 52) = 52
12432 18:37:50.829253 write(1, "    05 00 9d 00 3d 00 35 00 84 c"..., 52) = 52
12432 18:37:50.829341 write(1, "    23 c0 13 c0 09 00 a4 00 a2 0"..., 52) = 52
12432 18:37:50.829417 write(1, "    40 00 3f 00 3e 00 33 00 32 0"..., 52) = 52
12432 18:37:50.829494 write(1, "    99 00 98 00 97 00 45 00 44 0"..., 52) = 52
12432 18:37:50.829570 write(1, "    2d c0 29 c0 25 c0 0e c0 04 0"..., 52) = 52
12432 18:37:50.829646 write(1, "    96 00 41 c0 11 c0 07 c0 0c c"..., 52) = 52
12432 18:37:50.829722 write(1, "    12 c0 08 00 16 00 13 00 10 0"..., 52) = 52
12432 18:37:50.829798 write(1, "    0a 00 ff 01 00 00 55 00 0b 0"..., 52) = 52
12432 18:37:50.829874 write(1, "    0a 00 1c 00 1a 00 17 00 19 0"..., 52) = 52
12432 18:37:50.829950 write(1, "    1a 00 16 00 0e 00 0d 00 0b 0"..., 52) = 52
12432 18:37:50.830026 write(1, "    23 00 00 00 0d 00 20 00 1e 0"..., 52) = 52
12432 18:37:50.830102 write(1, "    01 05 02 05 03 04 01 04 02 0"..., 52) = 52
12432 18:37:50.830178 write(1, "    03 02 01 02 02 02 03 00 0f 0"..., 40) = 40
12432 18:37:50.830245 read(3,

然后，在这里卡了几分钟，直到握手成功完成。

来自 openssl:

<<< ??? [length 0005]
    16 03 03 0b 4d
<<< TLS 1.2 Handshake [length 0051], ServerHello
    02 00 00 4d 03 03 5a 76 49 73 24 d2 ab 80 ca a0
    ec 96 08 85 0e af 98 84 cd 62 43 ce 85 f9 63 51
    dd 06 a0 b0 45 85 20 5a 76 49 73 93 9b 85 41 79
    99 86 0d ca dd d5 71 76 3d 08 1b e7 96 2d 37 75
    11 e8 3e 0c 10 01 85 c0 30 00 00 05 ff 01 00 01
    00
<<< TLS 1.2 Handshake [length 09ab], Certificate
    0b 00 09 a7 00 09 a4 00 05 08 30 82 05 04 30 82
    03 ec a0 85 02 01 85 02 12 03 9d 4a 6c 36 25 2c
    7c 54 2a 3c a4 90 32 b6 cb da 68 30 85 06 09 2a
...
...

从 strace 输出:

 "\26\3\3\vM\2\0", 7) = 7
12432 18:42:54.131111 write(1, "<<< ??? [length 0005]\n", 22) = 22
12432 18:42:54.131220 write(1, "    16 03 03 0b 4d\n", 19) = 19
12432 18:42:54.131294 read(3, "\0M\3\3ZvG\322(\16\342\211%=\277\317\225m\266y\231\17X\221\263\177Cj{\\\203f"..., 2891) = 2891
12432 18:42:54.131385 write(1, "<<< TLS 1.2 Handshake [length 00"..., 49) = 49
12432 18:42:54.131464 write(1, "    02 00 00 4d 03 03 5a 76 47 d"..., 52) = 52
12432 18:42:54.131538 write(1, "    bf cf 95 6d b6 79 99 0f 58 9"..., 52) = 52
12432 18:42:54.131610 write(1, "    83 66 22 6a fb d8 20 5a 76 4"..., 52) = 52
12432 18:42:54.131682 write(1, "    b3 6c c9 49 bd 3d fa da 10 3"..., 52) = 52
12432 18:42:54.131774 write(1, "    b0 0c 8f d5 5c 8f bf c0 30 0"..., 52) = 52
12432 18:42:54.131845 write(1, "    00\n", 7) = 7
12432 18:42:54.131954 write(1, "<<< TLS 1.2 Handshake [length 09"..., 49) = 49
12432 18:42:54.132035 write(1, "    0b 00 09 a7 00 09 a4 00 05 0"..., 52) = 52
12432 18:42:54.132106 write(1, "    03 ec a0 03 02 01 02 02 12 0"..., 52) = 52
12432 18:42:54.132182 write(1, "    7c 54 2a 3c a4 90 32 b6 cb d"..., 52) = 52
12432 18:42:54.132466 write(1, "    86 48 86 f7 0d 01 01 0b 05 0"..., 52) = 52
12432 18:42:54.132546 write(1, "    06 03 55 04 06 13 02 55 53 3"..., 52) = 52
12432 18:42:54.132620 write(1, "    04 0a 13 0d 4c 65 74 27 73 2"..., 52) = 52 
...
...

同一命令的后续运行非常快，即 ~instantaneous。

对正在发生的事情或如何进一步调试有任何想法吗？

最佳答案

正如你所说的问题是在Tomcat启动之后，它可能是随机初始化非常慢。看看 entropy source .

关于java - Tomcat/合流 : very long TLS handshake at start，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/48603313/

文章推荐： ios - tableHeaderView UISearchBar 不显示

文章推荐： Python:检查异常引发的位置

文章推荐： eclipse - 在 SAP Hybris Server 上运行的 eclipse 中调试 JSP

tomcat - tomcat 安全领域是否有 tomcat 匿名角色或用户？
我希望在某些环境中使用用户名和密码保护某个角色，但在其他环境中甚至不需要提示。如果我在 tomcat web.xml 中有一个 auth-constraint，我可以创建一个具有“匿名”访问权限的角色
tomcat - 使用 Tomcat 管理器监控 Tomcat
我正在使用 Tomcat jmxproxy 和状态来监视 Web 应用程序，但是 jmxproxy 页面中有很多无用的信息，并且其中没有任何信息，例如事件连接数。有谁知道如何过滤 jmxproxy 页
tomcat - 从 Tomcat 本身重新启动 Tomcat
是否可以通过执行 JSP 来重启 Tomcat6？这是因为我想通过使用网络服务器远程部署应用程序的更改。部署脚本是用 bash 编写的，它从 svn 中 check out 最新版本，然后将其打包
tomcat - Gradle tomcat 插件尝试启动 tomcat 两次
我有一个包含 2 个子项目(后端和 ui)的 gradle 项目。 Ui由gradle tomcatRunWar完美启动.后端有我们在生产地点的配置描述符/conf/Catalina/localhos
tomcat - XAMPP Tomcat 显示正在运行但并未运行。无法阻止 Tomcat
发现 XAMPP 控件认为 tomcat 正在运行但无法停止它的问题。在catalina下的tomcat logs目录下可以找到如下错误 “严重:无法联系 localhost:8005。Tomcat
tomcat - puppetlabs/tomcat 模块是否使设置 Tomcat 的上下文路径变得简单？
PuppetLabs 在 PuppetForge 上有一个模块，用于部署 Tomcat 及其配置。 https://forge.puppet.com/puppetlabs/tomcat Tomcat
tomcat - 如何将 Tomcat 配置为在 Tomcat 启动时不自动启动某些应用程序？
我有一个部署到 Tomcat 实例中的 Web 应用程序。我希望能够将 tomcat 配置为在 Tomcat 本身启动时不自动启动该应用程序。但是，我确实希望启动 Tomcat 管理器，以便我可以根据
tomcat - 如何在不重新安装 Tomcat 的情况下安装 Tomcat Manager？
操作系统:windows XP。我已经安装了 Tomcat 7.0.25，文件夹“manager”位于 webapps 文件夹中。我已阅读此处的文档:http://tomcat.apache.or
tomcat - 访问日志分析@Tomcat
我们在 server.xml 文件中启用了以下访问日志模式 pattern="%h %H %l %u %t "%r" %s %b location: %{location}o"。有人可以帮助理解模式
tomcat - Tomcat 如何将请求映射到特定应用程序
我最近开始使用 tomcat，我有一个关于 Tomcat 请求路由/映射的查询。假设我在 tomcat 服务器中部署了四个应用程序 A、B、C 和 D，当有请求到来时，tomcat 如何知道要调用哪
tomcat - 通过外部设备访问 Tomcat
我在我的计算机上使用 Tomcat，它可以通过端口 8080 访问。我想要的是我应该能够使用我的计算机的 IP 地址访问我的 Tomcat 服务器页面。我以前读过很多主题，但找不到一个可以帮助我的主题
tomcat - tomcat 上的架构错误
我有一个 tomcat 7 服务器和一个 postgreSQL 9.0 数据库。我用它来为地理网络元数据编辑器设置开发环境。一切都是根据 geonetwork 网站教程设置的。我在将服务器与数据库连接
tomcat - 带有虚拟IP的Apache tomcat
我的服务器有物理 ip 和虚拟 ip 由网络管理员设置。在我安装的服务器内部 Apache tomcat 7.0.29并创建一个网络应用程序。当我运行 wget http://:8080/xxx或
tomcat - 使用单个 psi(tomcat) 探针来监控跨不同 tomcat 实例的多个实例
我有多个应用程序在不同的端口上运行(tomcat 实例) 都有相同的CATALINA_HOME 目前我必须在所有实例中部署和安装psi 探针，并在不同的窗口中分别监控每个端口。我如何在一个单一的探测
tomcat - 将 tomcat 控制台重定向到文件，每次 Tomcat 启动时都应该创建一个新文件
based on this question 我尝试将 Tomcat 控制台输出重定向到一个文本文件，它对我的 Web 应用程序工作正常，但问题是，每次 Tomcat 启动时它都会被覆盖。我需要创
tomcat - Tomcat 中已部署应用程序的内存
我需要阐明我的问题。问题是:有什么方法可以影响 Tomcat 为特定部署的应用程序分配多少堆内存？更多详细信息 - 我如何为已部署的应用程序设置特定的 Java 选项(考虑我想为每个应用程序设置特殊的
tomcat - tomcat 7中的类加载
应用服务器内部的类加载机制是开发人员常见的困惑来源；这就是为什么我想问一个关于 tomcat 7 服务器中这个机制的问题:我有一个网络应用程序 sample.war，它依赖于 jgroups 库，放
tomcat - 将嵌入式 tomcat 5 迁移到 tomcat 7
尝试将嵌入式 Tomcat 5 迁移到嵌入式 Tomcat 7。在启动过程中获取 NPE。我扩展了 Embedded 类并按照正确的顺序执行所有建议的初始化。 NPE 发生在这里: Caused b
tomcat - 使用指定的根目录和主页运行 Tomcat
我可以使用随附的 start.sh 文件启动 tomcat，但是是否有任何参数可以用来执行以下操作: 在指定的根目录启动 Tomcat 服务强制 Tomcat 在浏览器中拉出指定的主页谢谢最佳答
tomcat - tomcat 中的集群组中没有事件成员
我在两台 diff 机器 tomcat 服务器上做一个简单的集群配置。每次我启动 tomcat 时，我都会收到一个错误，就像集群组中没有事件成员一样。我正在附加集群配置

行者123

个人简介

我是一名优秀的程序员,十分优秀！

作者热门文章

滴滴打车优惠券免费领取

全站热门文章

首页

博学

6Ren·AI

商城

java - Tomcat/合流 : very long TLS handshake at start