[
https://issues.apache.org/jira/browse/KAFKA-16471?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17834200#comment-17834200
]
Gaurav Narula commented on KAFKA-16471:
---------------------------------------
[~chia7712] I'm not well versed with the backporting policy. Given that one
needs https://issues.apache.org/jira/browse/KAFKA-16305 as well to use Netty
based OpenSSL engine, perhaps we backport KAFKA-16305 to 3.7 and leave out 3.6
for now?
> SslTransportLayer may leak SSLEngine resources
> ----------------------------------------------
>
> Key: KAFKA-16471
> URL: https://issues.apache.org/jira/browse/KAFKA-16471
> Project: Kafka
> Issue Type: Bug
> Components: network
> Affects Versions: 3.7.0, 3.6.1
> Reporter: Gaurav Narula
> Assignee: Gaurav Narula
> Priority: Major
> Fix For: 3.8.0, 3.7.1
>
>
> {{SslTransportLayer}} does not invoke {{SSLEngine::closeInbound}} in
> {{close()}} after flushing the {{close_notify}} TLS alert.
> While this isn't a problem for the default JDK SSLEngine, it results in
> resource leak in Netty/OpenSSL based SSLEngine which frees native resources
> only when {{closeInbound}} is invoked.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
