New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 611820 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Aug 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug



Sign in to add a comment

POST sometimes sent over 0-RTT QUIC

Project Member Reported by rch@chromium.org, May 13 2016

Issue description

I thought we wouldn't do 0RTT posts in Chrome?

Also, why would a second connection to beacons.gvt2.com(265222: QUIC_SESSION) be created at about the same time as the first one?  Privacy mode, cert verify flags, etc all look the same to me.

265205: QUIC_SESSION
beacons.gvt2.com
Start Time: 2016-05-08 10:30:58.398
t= 47689 [st=     0] +QUIC_SESSION  [dt=716812+]
                      --> cert_verify_flags = 4
                      --> host = "beacons.gvt2.com"
                      --> port = 443
                      --> privacy_mode = true
                      --> require_confirmation = false
t= 47690 [st=     1]    SIGNED_CERTIFICATE_TIMESTAMPS_RECEIVED
                        --> embedded_scts = ""
                        --> scts_from_ocsp_response = ""
                        --> scts_from_tls_extension = "APIAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVR7UcwnAAAEAwBIMEYCIQCod/McRj0o3VCNd5qJmVwe3rJuHIOycsiijp7zZmDvcAIhAK94yXQ7C5OtVjkuoNxvlMiKEsPpkAlCVQNTrwTn8EroAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFUe1HJ8wAABAMASDBGAiEAxZzquIjZPiWahC4/K9OsVNC6gKeHpVpYkE3AeAJmWgoCIQCIcmGFKclytRdoMRlAsKVIEspOgDcIQ5UW74g++s6GHg=="
t= 47690 [st=     1]    SIGNED_CERTIFICATE_TIMESTAMPS_CHECKED
                        --> invalid_scts = []
                        --> unknown_logs_scts = []
                        --> verified_scts = [{"extensions":"","hash_algorithm":"SHA256","log_id":"7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/cs=","origin":"tls_extension","signature_algorithm":"ECDSA","signature_data":"MEYCIQCod/McRj0o3VCNd5qJmVwe3rJuHIOycsiijp7zZmDvcAIhAK94yXQ7C5OtVjkuoNxvlMiKEsPpkAlCVQNTrwTn8Ero","timestamp":"1462357838887","version":0},{"extensions":"","hash_algorithm":"SHA256","log_id":"3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvsw=","origin":"tls_extension","signature_algorithm":"ECDSA","signature_data":"MEYCIQDFnOq4iNk+JZqELj8r06xU0LqAp4elWliQTcB4AmZaCgIhAIhyYYUpyXK1F2gxGUCwpUgSyk6ANwhDlRbviD76zoYe","timestamp":"1462357838323","version":0}]
t= 47691 [st=     2]   +CERT_VERIFIER_REQUEST  [dt=5]
t= 47691 [st=     2]      CERT_VERIFIER_REQUEST_BOUND_TO_JOB
                          --> source_dependency = 265207 (CERT_VERIFIER_JOB)
t= 47696 [st=     7]   -CERT_VERIFIER_REQUEST
t= 47696 [st=     7]    CERT_CT_COMPLIANCE_CHECKED
                        --> build_timely = true
                        --> certificate = {"certificates":["-----BEGIN CERTIFICATE-----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\ndG7l3S70kqtlvDM=\n-----END CERTIFICATE-----\n","-----BEGIN CERTIFICATE-----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\nfsg12A==\n-----END CERTIFICATE-----\n","-----BEGIN CERTIFICATE-----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\n5fEWCRE11azbJHFwLJhWC9kXtNHjUStedejV0NxPNO3CBWaAocvmMw==\n-----END CERTIFICATE-----\n"]}
                        --> ct_compliance_status = "COMPLIES_VIA_SCTS"
t= 47697 [st=     8]    QUIC_SESSION_CERTIFICATE_VERIFIED
                        --> subjects = ["*.google.com","*.android.com","*.appengine.google.com","*.cloud.google.com","*.google-analytics.com","*.google.ca","*.google.cl","*.google.co.in","*.google.co.jp","*.google.co.uk","*.google.com.ar","*.google.com.au","*.google.com.br","*.google.com.co","*.google.com.mx","*.google.com.tr","*.google.com.vn","*.google.de","*.google.es","*.google.fr","*.google.hu","*.google.it","*.google.nl","*.google.pl","*.google.pt","*.googleadapis.com","*.googleapis.cn","*.googlecommerce.com","*.googlevideo.com","*.gstatic.cn","*.gstatic.com","*.gvt1.com","*.gvt2.com","*.metric.gstatic.com","*.urchin.com","*.url.google.com","*.youtube-nocookie.com","*.youtube.com","*.youtubeeducation.com","*.ytimg.com","android.clients.google.com","android.com","g.co","goo.gl","google-analytics.com","google.com","googlecommerce.com","urchin.com","www.goo.gl","youtu.be","youtube.com","youtubeeducation.com"]
t= 47697 [st=     8]    QUIC_SESSION_CRYPTO_HANDSHAKE_MESSAGE_SENT
                        --> CHLO<
                              SNI : "beacons.gvt2.com"
                              STK : 0xE3F2BBAA8B2E13B74182A95117FFE07696AE9FC00A710E4FDFF8F022B40B264C20A31195A09C288414DB1B9CBE6607BC122B4AA11F61E199FAB81FC3FA70CB2EEFC8B7837C7667E482BCD7B919C1D61CA3DF383DCCF47195E24A16B0229FE3491CDA21C97959C7BEEAD5684CD1787CFA3CA80C5702C0192ADEB941B567EC8CD686A1A1854FB773F51C54547E69710A6DA5FE67FE9AF2264AF133A0555A681B74F249
                              VER : 'Q031'
                              CCS : 0x7B26E9E7E45C71FF01E8816092921AE8
                              NONC: 0x572F4DA206F79E545A3F34BAB5E86B5CA3F0E4D16823A53939CE750CD07E7B10
                              MSPC: 100
                              AEAD: 'AESG'
                              UAID: "canary Chrome/52.0.2726.0 Intel Mac OS X 10_11_4"
                              SCID: 0x27A98D0925FBAB492511D592C3962921
                              TCID: 0x00000000
                              PDMD: 'X509'
                              SRBF: 1048576
                              ICSL: 30
                              CTIM: 0xA24D2F5700000000
                              NONP: 0xC026DF0F3D915197980E90BB6D5E8F2213589D937F8A283D6CCB68C77AA025E2
                              PUBS: 0x8D3C3108F028B8AD4D389B5D9664996A757FB5CA4332427E8F586C7B2BE52B14
                              SCLS: 0x01000000
                              KEXS: 'C255'
                              XLCT: 0x55EF5E4D21C5F565
                              CSCT: 0x
                              COPT: 'FIXD'
                              CCRT: 0x55EF5E4D21C5F565E2631A827D71855F400B7B90A9AE79EB
                              IRTT: 63032
                              CFCW: 15728640
                              SFCW: 6291456
                            >
t= 47697 [st=     8]    QUIC_SESSION_STREAM_FRAME_SENT
                        --> fin = false
                        --> length = 1024
                        --> offset = "0"
                        --> stream_id = 1
t= 47697 [st=     8]    QUIC_SESSION_PACKET_SENT
                        --> packet_number = "1"
                        --> sent_time_us = "894382040390"
                        --> transmission_type = 0
t= 47697 [st=     8]    QUIC_CHROMIUM_CLIENT_STREAM_SEND_REQUEST_HEADERS
                        --> :authority: beacons.gvt2.com
                            :method: POST
                            :path: /domainreliability/upload
                            :scheme: https
                            accept-encoding: gzip, deflate
                            accept-language: en-US,en;q=0.8
                            content-length: 1441
                            content-type: application/json; charset=utf-8
                            user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2726.0 Safari/537.36
                        --> quic_priority = 3
                        --> quic_stream_id = 5

 

Comment 1 by rch@chromium.org, May 13 2016

Labels: -Restrict-View-Google Restrict-View-SecurityTeam

Comment 2 by rch@chromium.org, Jun 16 2016

Cc: zhongyi@chromium.org
Owner: rch@chromium.org
Project Member

Comment 3 by bugdroid1@chromium.org, Jun 16 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/dfaaaaae42bc995df087c7591b8d4bc3da9ac44a

commit dfaaaaae42bc995df087c7591b8d4bc3da9ac44a
Author: rch <rch@chromium.org>
Date: Thu Jun 16 21:35:52 2016

Disable FLAGS_quic_reply_to_rej

BUG= 611820 

Review-Url: https://codereview.chromium.org/2076673003
Cr-Commit-Position: refs/heads/master@{#400260}

[modify] https://crrev.com/dfaaaaae42bc995df087c7591b8d4bc3da9ac44a/net/quic/quic_flags.cc

Project Member

Comment 4 by bugdroid1@chromium.org, Jun 18 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/cb1d6bdee0b6971ae77243cf78668e3973265a7a

commit cb1d6bdee0b6971ae77243cf78668e3973265a7a
Author: rch <rch@chromium.org>
Date: Sat Jun 18 00:33:07 2016

Move the logic for delaying 0-RTT QUIC POST from the QuicStreamFactory to QuicHttpStream and BidirectionalStreamQuicImpl.

BUG= 611820 

Review-Url: https://codereview.chromium.org/2077683002
Cr-Commit-Position: refs/heads/master@{#400551}

[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/bidirectional_stream_quic_impl.cc
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/bidirectional_stream_quic_impl.h
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/bidirectional_stream_quic_impl_unittest.cc
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_chromium_client_stream.cc
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_flags.cc
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_http_stream.cc
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_http_stream.h
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_stream_factory.cc
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_stream_factory.h
[modify] https://crrev.com/cb1d6bdee0b6971ae77243cf78668e3973265a7a/net/quic/quic_stream_factory_test.cc

Comment 5 by rch@chromium.org, Aug 16 2016

Status: Fixed (was: Untriaged)
Project Member

Comment 6 by sheriffbot@chromium.org, Aug 17 2016

Labels: -Restrict-View-SecurityTeam Restrict-View-SecurityNotify
Project Member

Comment 7 by sheriffbot@chromium.org, Nov 23 2016

Labels: -Restrict-View-SecurityNotify allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment