mtls-certificates: Fail on transport, not network level (wrong port) #42156
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
fixes #40553
The test had been reporting a false negative in HotSpot mode by expecting ConnectException. That exception was not caused by a failed handshake, it was caused by the test trying to talk to the server on a wrong port.
In Native mode, the test framework had the port correct, so it talked to the server and got the correct SSLHandshakeException.
From JDK doc:
It makes no sense to test a connection refused error on a port nobody listens on. The correct test is to try to trigger a handshake exception while talking to the actual server.