[jira] [Created] (SQOOP-3389) Unable to build Sqoop 1.4.7 due to upstream TLS 1.2 issue

["Devin G. Bost (JIRA)" <ji...@apache.org>]

Devin G. Bost created SQOOP-3389:
------------------------------------

             Summary: Unable to build Sqoop 1.4.7 due to upstream TLS 1.2 issue
                 Key: SQOOP-3389
                 URL: https://issues.apache.org/jira/browse/SQOOP-3389
             Project: Sqoop
          Issue Type: Bug
          Components: build
    Affects Versions: 1.4.7
         Environment: Sqoop 1.4.7

Java SDK 1.6.0_45 

Ant 1.7.1

Windows 10 via MinGW64
            Reporter: Devin G. Bost


When building Sqoop 1.4.7 with Java SDK 1.6.0_45 and Ant 1.7.1 on Windows in MinGW64, I obtain these build errors:

[ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/releases/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.pom
[ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/releases/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.jar
[ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/staging/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.pom
[ivy:resolve] Server access Error: Remote host closed connection during handshake url=[https://repository.cloudera.com/content/repositories/staging/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.jar]

 

I experienced similar build errors on a different project, which I traced to this issue: [https://stackoverflow.com/questions/21245796/javax-net-ssl-sslhandshakeexception-remote-host-closed-connection-during-handsh/22629008]

The problem, however, is that because this particular build of Sqoop requires Java 1.6, TLS v1.2 is unsupported, according to here: [https://stackoverflow.com/questions/33364100/how-to-use-tls-1-2-in-java-6]

which is a problem because some public repositories have dropped support for TLS versions prior to 1.2, as reported here: [https://github.com/Microsoft/vcpkg/issues/2969]

and here: [https://blog.github.com/2018-02-23-weak-cryptographic-standards-removed/]

If it is impossible now to pull the upstream dependencies when building via Ant due to TLS 1.2 being unsupported in Java 1.6, then this is a critical dependency conflict. 

If additional configuration steps are required to be able to successfully build, they are not documented in any of the Sqoop documentation that I have found. 

 

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)