You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Attila Doroszlai (Jira)" <ji...@apache.org> on 2026/08/24 13:18:00 UTC
[jira] [Resolved] (HDDS-16027) Certificate host name check fails in TestInterSCMGrpcProtocolService
[ https://issues.apache.org/jira/browse/HDDS-16027?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Attila Doroszlai resolved HDDS-16027.
-------------------------------------
Resolution: Duplicate
> Certificate host name check fails in TestInterSCMGrpcProtocolService
> ---------------------------------------------------------------------
>
> Key: HDDS-16027
> URL: https://issues.apache.org/jira/browse/HDDS-16027
> Project: Apache Ozone
> Issue Type: Task
> Components: test
> Reporter: Attila Doroszlai
> Assignee: István Fajth
> Priority: Major
>
> Upgrade to Netty 4.1.135 or later will trigger failure in TestInterSCMGrpcProtocolService, probably related to a fix in Netty's [host name validation|https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9].
> {code}
> [ERROR] Tests run: 1, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 4.010 s <<< FAILURE! -- in org.apache.hadoop.hdds.scm.ha.TestInterSCMGrpcProtocolService
> [ERROR] org.apache.hadoop.hdds.scm.ha.TestInterSCMGrpcProtocolService.testMTLSOnInterScmGrpcProtocolServiceAccess -- Time elapsed: 3.971 s <<< ERROR!
> ...
> Caused by: java.security.cert.CertificateException: No name matching localhost found for SNIHostName=null and peerHost=localhost in the chain of 1 certificate(s): 1. subjectAlternativeNames=[], CN=service.
> ...
> Caused by: java.security.cert.CertificateException: No name matching localhost found
> {code}
> (This can be [reproduced|https://github.com/adoroszlai/ozone/actions/runs/30453856330/job/90586833625#step:13:3257] by bumping Ratis to 3.3.0 (RC1 for now).)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org