[cassandra-builds] branch trunk updated: re-enable legacy TLSv1 and TLSv1.1 in both openjdk-8 and openjdk-11

[mc...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

mck pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/cassandra-builds.git


The following commit(s) were added to refs/heads/trunk by this push:
     new d1a3a0c  re-enable legacy TLSv1 and TLSv1.1 in both openjdk-8 and openjdk-11
d1a3a0c is described below

commit d1a3a0c59b3c5c17697d6a6656cd5d4f3a1cdbe9
Author: Mick Semb Wever <mc...@apache.org>
AuthorDate: Fri Aug 13 21:24:54 2021 +0200

    re-enable legacy TLSv1 and TLSv1.1 in both openjdk-8 and openjdk-11
    
     patch by Mick Semb Wever; reviewed by Brandon Williams for CASSANDRA-16848
---
 docker/testing/ubuntu2004_j11.docker | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker/testing/ubuntu2004_j11.docker b/docker/testing/ubuntu2004_j11.docker
index e432bb4..14bba2a 100644
--- a/docker/testing/ubuntu2004_j11.docker
+++ b/docker/testing/ubuntu2004_j11.docker
@@ -81,6 +81,10 @@ RUN export DEBIAN_FRONTEND=noninteractive && \
 # make Java 8 the default executable (we use to run all tests against Java 8)
 RUN update-java-alternatives --set java-1.8.0-openjdk-$(dpkg --print-architecture)
 
+# enable legacy TLSv1 and TLSv1.1 (CASSANDRA-16848)
+RUN find /etc -type f -name java.security -exec sed -i 's/TLSv1, TLSv1.1//' {} \;
+RUN find /etc -type f -name java.security -exec sed -i 's/3DES_EDE_CBC$/3DES_EDE_CBC, TLSv1, TLSv1.1/' {} \;
+
 # setup our user -- if we don't do this docker will default to root and Cassandra will fail to start
 # as we appear to have a check that the user isn't starting Cassandra as root
 RUN export DEBIAN_FRONTEND=noninteractive && \

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org