You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Robert Kanter (JIRA)" <ji...@apache.org> on 2018/10/09 18:17:00 UTC
[jira] [Comment Edited] (HADOOP-15832) Upgrade BouncyCastle
[ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16643877#comment-16643877 ]
Robert Kanter edited comment on HADOOP-15832 at 10/9/18 6:16 PM:
-----------------------------------------------------------------
I'm not sure why it ran twice, but the test failures seem unrelated. I ran them all on my machine and they all passed except for {{TestNameNodeMetadataConsistency}}, but that also fails without the patch (looks like HDFS-11396 is already open for that).
was (Author: rkanter):
I'm not sure why it ran twice, but the test failures seem unrelated. I ran them all on my machine and they all passed except for {{TestNameNodeMetadataConsistency}}, but that also fails on trunk (looks like HDFS-11396 is already open for that).
> Upgrade BouncyCastle
> --------------------
>
> Key: HADOOP-15832
> URL: https://issues.apache.org/jira/browse/HADOOP-15832
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 3.2.0
> Reporter: Robert Kanter
> Assignee: Robert Kanter
> Priority: Major
> Attachments: HADOOP-15832.001.patch
>
>
> As part of my work on YARN-6586, I noticed that we're using a very old version of BouncyCastle:
> {code:xml}
> <dependency>
> <groupId>org.bouncycastle</groupId>
> <artifactId>bcprov-jdk16</artifactId>
> <version>1.46</version>
> <scope>test</scope>
> </dependency>
> {code}
> The *-jdk16 artifacts have been discontinued and are not recommended (see [http://bouncy-castle.1462172.n4.nabble.com/Bouncycaslte-bcprov-jdk15-vs-bcprov-jdk16-td4656252.html]).
> In particular, the newest release, 1.46, is from {color:#FF0000}2011{color}!
> [https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk16]
> The currently maintained and recommended artifacts are *-jdk15on:
> [https://www.bouncycastle.org/latest_releases.html]
> They're currently on version 1.60, released only a few months ago.
> We should update BouncyCastle to the *-jdk15on artifacts and the 1.60 release. It's currently a test-only artifact, so there should be no backwards-compatibility issues with updating this. It's also needed for YARN-6586, where we'll actually be shipping it.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org