You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@spark.apache.org by "max-allan-cgr (via GitHub)" <gi...@apache.org> on 2025/07/04 15:41:12 UTC
Re: [PR] [SPARK-51168][BUILD] Test Hadoop 3.4.2 [spark]
max-allan-cgr commented on PR #51127:
URL: https://github.com/apache/spark/pull/51127#issuecomment-3036730729
Nearly there!!
```
bash-5.3# ls -l /etc/ssl/certs/java/cacerts
-r--r--r-- 1 root root 185898 Jul 4 15:30 /etc/ssl/certs/java/cacerts
bash-5.3# ls -l /usr/lib/jvm/default-jvm/lib/security/cacerts
-rw-r--r-- 1 root root 164435 Jul 4 15:30 /usr/lib/jvm/default-jvm/lib/security/cacerts
```
So the file in /etc/ssl IS updated. There is no link to it though.
EVEN If I install java-cacerts-default.
I can fix it by:
```
bash-5.3# rm /usr/lib/jvm/default-jvm/lib/security/cacerts
bash-5.3# ln -s /etc/ssl/certs/java/cacerts /usr/lib/jvm/default-jvm/lib/security/cacerts
bash-5.3# ls -l /usr/lib/jvm/default-jvm/lib/security/cacerts /etc/ssl/certs/java/cacerts
-r--r--r-- 1 root root 185898 Jul 4 15:30 /etc/ssl/certs/java/cacerts
lrwxrwxrwx 1 root root 27 Jul 4 15:33 /usr/lib/jvm/default-jvm/lib/security/cacerts -> /etc/ssl/certs/java/cacerts
bash-5.3#
bash-5.3# keytool -v -list -cacerts -storepass changeit | grep dansk
Alias name: danskebankdmzissuingca1
accessLocation: URIName: http://pki1.danskebank.com/aiacdp/DanskeBankRootCA.crt
accessLocation: URIName: http://pki2.danskebank.com/aiacdp/DanskeBankRootCA.crt
[URIName: http://pki1.danskebank.com/aiacdp/DanskeBankRootCA.crl, URIName: http://pki2.danskebank.com/aiacdp/DanskeBankRootCA.crl]
Alias name: danskebankdmzissuingca2
.....
```
But I would prefer it if someone could make the java-cacerts-default create a link to /etc/ssl... that would be much better.
Compare with Alpine:
```
docker run -it alpine
apk add java-cacerts openjdk21
ls -l /usr/lib/jvm/default-jvm/lib/security/
total 240
-rw-r--r-- 1 root root 2488 Apr 19 03:52 blocked.certs
lrwxrwxrwx 1 root root 27 Jul 4 15:39 cacerts -> /etc/ssl/certs/java/cacerts
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org