You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@calcite.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2018/09/17 17:39:00 UTC
[jira] [Commented] (CALCITE-2568) Ensure that IBM JDK TLS cipher
list matches Oracle/OpenJDK for Travis CI
[ https://issues.apache.org/jira/browse/CALCITE-2568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16617879#comment-16617879 ]
ASF GitHub Bot commented on CALCITE-2568:
-----------------------------------------
GitHub user risdenk opened a pull request:
https://github.com/apache/calcite-avatica/pull/68
[CALCITE-2568] Ensure that IBM JDK TLS cipher list matches Oracle/OpennJDK for Travis CI
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/risdenk/calcite-avatica CALCITE-2568
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/calcite-avatica/pull/68.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #68
----
commit 95e02c62058b06daf109cf0c22eb20164334435a
Author: Kevin Risden <kr...@...>
Date: 2018-09-17T17:37:43Z
[CALCITE-2568] Ensure that IBM JDK TLS cipher list matches Oracle/OpenJDK for Travis CI
----
> Ensure that IBM JDK TLS cipher list matches Oracle/OpenJDK for Travis CI
> ------------------------------------------------------------------------
>
> Key: CALCITE-2568
> URL: https://issues.apache.org/jira/browse/CALCITE-2568
> Project: Calcite
> Issue Type: Improvement
> Components: avatica
> Reporter: Kevin Risden
> Assignee: Kevin Risden
> Priority: Major
> Fix For: avatica-1.13.0
>
>
> IBM JDK fails for o.a.c.a.SslDriverTest after update to Jetty 9.4.
> {code:java}
> [1;31mERROR[m] testReadWrite[0](org.apache.calcite.avatica.SslDriverTest) Time elapsed: 0.082 s <<< ERROR!
> java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
> at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
> Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
> at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
> [[1;31mERROR[m] testReadWrite[1](org.apache.calcite.avatica.SslDriverTest) Time elapsed: 0.037 s <<< ERROR!
> java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
> at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
> Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
> at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
> {code}
> This seems to be a difference between IBM JDK and Oracle/OpenJDK related to SSL_ vs TLS_ prefixes for ciphers. The fix for this is to force IBM JDK to honor the Oracle/OpenJDK prefixes.
> * [https://www.ibm.com/developerworks/community/forums/html/topic?id=d34413d1-fc6d-4ea1-9e7b-4e331b591aa9&ps=50]
> * [https://www.ibm.com/support/knowledgecenter/en/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/jsse2Docs/matchsslcontext_tls.html]
> The Java property to add is:
> {code:java}
> -Dcom.ibm.jsse2.overrideDefaultTLS=true{code}
> Oracle/OpenJDK ignores the Java property so we can add the property to .travis.yml to get the tests to pass.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)