[ 
https://issues.apache.org/jira/browse/CASSANDRA-16848?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17398058#comment-17398058
 ] 

Michael Semb Wever commented on CASSANDRA-16848:
------------------------------------------------

At least for the two other failures, if we are to continue testing TLSv1 and 
TLSv1.1, then we need to update the java.security configuration file in the 
docker image. Given that users can still use TLSv1 and TLSv1.1 (older JDKs or 
adjusting the java.security file), I would think it makes sense to keep the 
tests for now.

> Latest docker testing image (20210809) does not default support TLSv1 and 
> TLSv1.1
> ---------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-16848
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-16848
>             Project: Cassandra
>          Issue Type: Bug
>          Components: CI, Test/dtest/java
>            Reporter: Michael Semb Wever
>            Priority: Normal
>             Fix For: 4.0.x, 4.x
>
>
> Since deployment of the latest docker testing image (20210809), 
> ci-cassandra.a.o is failing a few 
> [tests|https://ci-cassandra.apache.org/job/Cassandra-trunk-jvm-dtest/833], 
> e.g.:
> * SSTableLoaderEncryptionOptionsTest.bulkLoaderCannotAgreeOnClientTLSProtocol
> * 
> NativeTransportEncryptionOptionsTest.negotiatedProtocolMustBeAcceptedProtocolTest
> * InternodeEncryptionOptionsTest.negotiatedProtocolMustBeAcceptedProtocolTest
> Looking at the 
> [logs|https://ci-cassandra.apache.org/job/Cassandra-trunk-jvm-dtest/lastSuccessfulBuild/jdk=jdk_1.8_latest,label=cassandra,split=8/testReport/junit/org.apache.cassandra.distributed.test/SSTableLoaderEncryptionOptionsTest/bulkLoaderCannotAgreeOnClientTLSProtocol/],
>  the in-jvm node is starting up with
> {noformat}
> JdkSslContext.java:97 - Default protocols (JDK): [TLSv1.2] 
> {noformat}
> Running the test locally works, and the matching line is
> {noformat}
> JdkSslContext.java:97 - Default protocols (JDK): [TLSv1.2, TLSv1.1, TLSv1]
> {noformat}
> The docker image is using {{openjdk version "1.8.0_282"}}.
> Upgrading and using {{1.8.0_302}} locally reproduces the failure.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to