This is an automated email from the ASF dual-hosted git repository.
mck pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/cassandra-builds.git
The following commit(s) were added to refs/heads/trunk by this push:
new d1a3a0c re-enable legacy TLSv1 and TLSv1.1 in both openjdk-8 and
openjdk-11
d1a3a0c is described below
commit d1a3a0c59b3c5c17697d6a6656cd5d4f3a1cdbe9
Author: Mick Semb Wever <[email protected]>
AuthorDate: Fri Aug 13 21:24:54 2021 +0200
re-enable legacy TLSv1 and TLSv1.1 in both openjdk-8 and openjdk-11
patch by Mick Semb Wever; reviewed by Brandon Williams for CASSANDRA-16848
---
docker/testing/ubuntu2004_j11.docker | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/docker/testing/ubuntu2004_j11.docker
b/docker/testing/ubuntu2004_j11.docker
index e432bb4..14bba2a 100644
--- a/docker/testing/ubuntu2004_j11.docker
+++ b/docker/testing/ubuntu2004_j11.docker
@@ -81,6 +81,10 @@ RUN export DEBIAN_FRONTEND=noninteractive && \
# make Java 8 the default executable (we use to run all tests against Java 8)
RUN update-java-alternatives --set java-1.8.0-openjdk-$(dpkg
--print-architecture)
+# enable legacy TLSv1 and TLSv1.1 (CASSANDRA-16848)
+RUN find /etc -type f -name java.security -exec sed -i 's/TLSv1, TLSv1.1//' {}
\;
+RUN find /etc -type f -name java.security -exec sed -i
's/3DES_EDE_CBC$/3DES_EDE_CBC, TLSv1, TLSv1.1/' {} \;
+
# setup our user -- if we don't do this docker will default to root and
Cassandra will fail to start
# as we appear to have a check that the user isn't starting Cassandra as root
RUN export DEBIAN_FRONTEND=noninteractive && \
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
