通过 SSL 连接到 LDAP 时 Glassfish 延迟 30 秒

Question

我正在尝试使用 GlassFish 通过 SSL 连接到我公司的 LDAP。一切正常，除了有时连接需要很长时间。

启用ssl 调试后，我发现Change Cipher Spec 有时会有30 秒的延迟，但并非总是如此。延迟示例如下所示。

[2020-06-18T09:11:51.806+0100] [glassfish 4.1] [INFO] [] [] [tid: _ThreadID=32 _ThreadName=Thread-8] [timeMillis: 1592467911806] [levelValue: 800] [[
  http-listener-1(1), WRITE: TLSv1.2 Handshake, length = 40]]

[2020-06-18T09:12:22.030+0100] [glassfish 4.1] [INFO] [] [] [tid: _ThreadID=32 _ThreadName=Thread-8] [timeMillis: 1592467942030] [levelValue: 800] [[
  http-listener-1(1), READ: TLSv1.2 Change Cipher Spec, length = 1]]

[2020-06-18T09:12:22.030+0100] [glassfish 4.1] [INFO] [] [] [tid: _ThreadID=32 _ThreadName=Thread-8] [timeMillis: 1592467942030] [levelValue: 800] [[
  http-listener-1(1), READ: TLSv1.2 Handshake, length = 40]]

这是用于连接到 LDAP 的代码

final Hashtable<String, String> env = new Hashtable<String, String> ();

final String url = "ldaps://" + ldapHostAddress + ":" + ldapPort;

env.put (Context.SECURITY_PROTOCOL, "ssl");
env.put (Context.PROVIDER_URL, url);
env.put (Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put (Context.SECURITY_AUTHENTICATION, "simple");
env.put (Context.SECURITY_PRINCIPAL, principalDN);
env.put (Context.SECURITY_CREDENTIALS, principalPassword);

// Ensure the objectGUID is handled as a binary object, rather than a string.
env.put ("java.naming.ldap.attributes.binary", "objectGUID");

LdapContext connection = new InitialLdapContext (env, null);

运行这段来自命令行的代码似乎没有受到 30 延迟的影响，所以我只能假设这是 GlassFish 的问题。如有任何建议，我们将不胜感激。

Answer 1

事实证明，GlassFish 偶尔会在解析 LDAP 服务器的 DNS 名称时遇到问题。用 IP 地址替换 DNS 名称消除了执行握手时的延迟。

通过 SSL 连接到 LDAP 时 Glassfish 延迟 30 秒

Glassfish 30 second delay when connecting to LDAP via SSL

ssl

ldap

glassfish