title: Java TLS Connection Reset using some JDKs
body: <p>The OWASP dependency-check project has an open ticket (<a href="https://github.com/jeremylong/DependencyCheck/issues/561" rel="nofollow">#561</a>) that I am unable to reproduce or figure out exactly what is going on. On some systems using OpenJDK HTTPS connections to the NVD CVE Data Feed (<a href="https://nvd.nist.gov/download/nvdcve-Modified.xml.gz" rel="nofollow">https://nvd.nist.gov/download/nvdcve-Modified.xml.gz</a>) fail. Specifically, they fail with a <code>java.net.SocketException: Connection reset</code>. I have been unable to reproduce the issue on any system I own - any of the JRE/JDK installs seem to work on my systems (ibm, oracle, open jdk).</p>
  
  <p>A gist of the SSL Debug log from a system for which the TLS connection fails can be found <a href="https://gist.github.com/mikjo/ba1c8b23c8b88644426d25f8a6323661" rel="nofollow">here</a>. Can anyone shed some light as to why the HTTPS download is failing for some installations? When people have had an issue with openJDK and they install Oracle JDK the download works.</p>
  
  <p>Thanks!</p>
  
  <p>--jeremy</p>