You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2020/11/16 13:46:56 UTC

[GitHub] [pulsar] lhotari opened a new issue #8580: ProxyKeyStoreTlsTestWithAuth and ProxyKeyStoreTlsTestWithoutAuth fail when TLS1.3 is available, (JDK version > 8u261)

lhotari opened a new issue #8580:
URL: https://github.com/apache/pulsar/issues/8580


   **Describe the bug**
   
   There's some issue with Pulsar when TLS 1.3 is available. JDK versions since 8u261 bundle TLS 1.3 .
   One sign of the issues is that ProxyKeyStoreTlsTestWithAuth and ProxyKeyStoreTlsTestWithoutAuth fail when TLS1.3 is available. 
   
   Underlying exception is:
   ```
   java.nio.channels.ClosedChannelException: null
   	at io.netty.handler.ssl.SslHandler.channelInactive(SslHandler.java:1105) [netty-handler-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:262) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:248) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.AbstractChannelHandlerContext.fireChannelInactive(AbstractChannelHandlerContext.java:241) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.DefaultChannelPipeline$HeadContext.channelInactive(DefaultChannelPipeline.java:1405) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:262) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:248) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.DefaultChannelPipeline.fireChannelInactive(DefaultChannelPipeline.java:901) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.AbstractChannel$AbstractUnsafe$8.run(AbstractChannel.java:818) [netty-transport-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:164) [netty-common-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:472) [netty-common-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.channel.epoll.EpollEventLoop.run(EpollEventLoop.java:384) [netty-transport-native-epoll-4.1.51.Final-linux-x86_64.jar:4.1.51.Final]
   	at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) [netty-common-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.51.Final.jar:4.1.51.Final]
   	at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) [netty-common-4.1.51.Final.jar:4.1.51.Final]
   	at java.lang.Thread.run(Thread.java:748) [?:1.8.0_272]
   ```
   
   **To Reproduce**
   Steps to reproduce the behavior:
   
   Install Java JDK equal or newer than 8u261, for example 8u272
   ```
   git clone --depth 1 https://github.com/apache/pulsar
   cd pulsar
   mvn -B -ntp -DskipTests -Pcore-modules install
   mvn -B -ntp test -pl pulsar-proxy -DtestForkCount=1 -DtestReuseFork=true -Dinclude="**/ProxyKeyStoreTlsTestWith*.java" -DredirectTestOutputToFile=false
   ```
   
   **Expected behavior**
   
   Java 8 with TLS 1.3 implementation should be supported for Pulsar development and also at runtime.
   Currently it's unclear whether the TLS 1.3 availability causes some other issues at Pulsar runtime.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [pulsar] codelipenghui closed issue #8580: ProxyKeyStoreTlsTestWithAuth and ProxyKeyStoreTlsTestWithoutAuth fail when TLS1.3 is available, (JDK version >= 8u261)

Posted by GitBox <gi...@apache.org>.
codelipenghui closed issue #8580:
URL: https://github.com/apache/pulsar/issues/8580


   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org