You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Michael Semb Wever (Jira)" <ji...@apache.org> on 2021/08/12 11:55:00 UTC

[jira] [Commented] (CASSANDRA-16848) Latest docker testing image (20210809) does not default support TLSv1 and TLSv1.1

    [ https://issues.apache.org/jira/browse/CASSANDRA-16848?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17398018#comment-17398018 ] 

Michael Semb Wever commented on CASSANDRA-16848:
------------------------------------------------

https://senthilnayagan.medium.com/tlsv1-and-tlsv1-1-protocols-disabled-by-default-in-javas-latest-patch-released-on-april-20-2021-52c309f6b16d

> Latest docker testing image (20210809) does not default support TLSv1 and TLSv1.1
> ---------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-16848
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-16848
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Michael Semb Wever
>            Priority: Normal
>             Fix For: 4.0.x, 4.x
>
>
> ci-cassandra.a.o is failing a few [tests|https://ci-cassandra.apache.org/job/Cassandra-trunk-jvm-dtest/833], e.g.:
> * SSTableLoaderEncryptionOptionsTest.bulkLoaderCannotAgreeOnClientTLSProtocol
> * NativeTransportEncryptionOptionsTest.negotiatedProtocolMustBeAcceptedProtocolTest
> * InternodeEncryptionOptionsTest.negotiatedProtocolMustBeAcceptedProtocolTest
> Looking at the [logs|https://ci-cassandra.apache.org/job/Cassandra-trunk-jvm-dtest/lastSuccessfulBuild/jdk=jdk_1.8_latest,label=cassandra,split=8/testReport/junit/org.apache.cassandra.distributed.test/SSTableLoaderEncryptionOptionsTest/bulkLoaderCannotAgreeOnClientTLSProtocol/], the in-jvm node is starting up with
> {noformat}
> JdkSslContext.java:97 - Default protocols (JDK): [TLSv1.2] 
> {noformat}
> Running the test locally works, and the matching line is
> {noformat}
> JdkSslContext.java:97 - Default protocols (JDK): [TLSv1.2, TLSv1.1, TLSv1]
> {noformat}
> The docker image is using {{openjdk version "1.8.0_282"}}.
> Using {{1.8.0_302}} locally reproduces the failure.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org