You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-dev@hadoop.apache.org by Wei-Chiu Chuang <we...@cloudera.com.INVALID> on 2019/10/09 20:06:40 UTC

Re: Hadoop and OpenSSL 1.1.1

Filed HADOOP-16647 <https://issues.apache.org/jira/browse/HADOOP-16647> I
am not planning to work on this any time soon so if any one is interested
feel free to pick it up/supply additional information.

On Wed, Oct 9, 2019 at 9:19 AM Wei-Chiu Chuang <we...@apache.org> wrote:

> Ok I stand corrected.
>
> That was for OpenSSL 1.1.0 and it might not even work for 1.1.1. The
> OpenSSL release version doesn't imply backward compatibility.
> Would you please try it out and let me know if HADOOP-14597 works or not?
> If not we need to file a jira to track this because OpenSSL 1.1.0 has
> already EOL'd and we need to look into support 1.1.1 (another 4 years until
> EOL)
> https://www.openssl.org/policies/releasestrat.html
>
> On Wed, Oct 9, 2019 at 8:55 AM Wei-Chiu Chuang <we...@cloudera.com>
> wrote:
>
>> See https://issues.apache.org/jira/browse/HADOOP-14597
>> OpenSSL 1.1.0 is supported with Hadoop 3.
>> We should backport this in Hadoop 2.
>>
>> I don't recall if we ever documented openssl version supported. Would be
>> nice to add that too.
>>
>> On Wed, Oct 9, 2019 at 12:09 AM Gonzalo Gomez <go...@bitnami.com>
>> wrote:
>>
>>> Hi, any comment regarding Hadoop and OpenSSL 1.1.1?
>>>
>>> On Fri, Oct 4, 2019 at 10:50 AM Gonzalo Gomez <go...@bitnami.com>
>>> wrote:
>>>
>>>> Hi all,
>>>>
>>>>
>>>> As OpenSSL 1.0.2 EOL is getting closer (end of this year [1]) I tried
>>>> to run Hadoop with OpenSSL 1.1.1d, but running the checknative command
>>>> gives false for the openssl library.
>>>>
>>>>
>>>> openssl: false EVP_CIPHER_CTX_cleanup
>>>>
>>>>
>>>> If I downgrade OpenSSL to 1.0.2s, it shows true and the path to
>>>> libcrypto.so library on my system. I searched for the
>>>> EVP_CIPHER_CTX_cleanup function and according to [2] it was removed on
>>>> OpenSSL 1.1.0. Can you tell me if Hadoop supports OpenSSL 1.1.1 or if it is
>>>> planned to be supported at any time in the future?
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Gonzalo
>>>>
>>>>
>>>> [1] https://www.openssl.org/policies/releasestrat.html
>>>>
>>>> [2] https://stackoverflow.com/a/39762336
>>>>
>>>> --
>>>> Run your favorite apps in the cloud with Bitnami
>>>> Confidential - All Rights Reserved.
>>>> BitRock © 2019
>>>>
>>>
>>>
>>> --
>>> Run your favorite apps in the cloud with Bitnami
>>> Confidential - All Rights Reserved.
>>> BitRock © 2019
>>>
>>