[
https://issues.apache.org/jira/browse/CASSANDRA-19739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17862392#comment-17862392
]
Stefan Miklosovic edited comment on CASSANDRA-19739 at 7/2/24 10:37 AM:
------------------------------------------------------------------------
moving it to test scope fails all tests in
org.apache.cassandra.security.SSLFactoryTest for {*}Java 17{*}.
https://app.circleci.com/pipelines/github/instaclustr/cassandra/4444/workflows/ff56cfa5-2cab-42c4-9926-69f9496d74fd/jobs/246921/tests
{code:java}
DEBUG [main] 2024-07-02 12:30:57,273 SelfSignedCertificate.java:253 - Failed to
generate a self-signed X.509 certificate using sun.security.x509:
java.lang.UnsupportedOperationException: OpenJdkSelfSignedCertGenerator not
supported on the used JDK version
at
io.netty.handler.ssl.util.OpenJdkSelfSignedCertGenerator.generate(OpenJdkSelfSignedCertGenerator.java:167)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:251)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:166)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:115)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:90)
at
org.apache.cassandra.security.SSLFactoryTest.<clinit>(SSLFactoryTest.java:67)
{code}
or simply (this one is more prevalent)
{code}
java.lang.NoClassDefFoundError: Could not initialize class
org.apache.cassandra.security.SSLFactoryTest
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)
at
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at
java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499)
at
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:480)
at
org.junit.runners.BlockJUnit4ClassRunner.createTest(BlockJUnit4ClassRunner.java:217)
{code}
I think that the former happens because I was testing it locally on Oracle Java
and it does not know any "OpenJdkSelfSignedCertGenerator" nevertheless it does
not work in Circle either for other reasons.
On Java 11 it works.
was (Author: smiklosovic):
moving it to test scope fails all tests in
org.apache.cassandra.security.SSLFactoryTest for {*}Java 17{*}.
https://app.circleci.com/pipelines/github/instaclustr/cassandra/4444/workflows/ff56cfa5-2cab-42c4-9926-69f9496d74fd/jobs/246921/tests
{code:java}
DEBUG [main] 2024-07-02 12:30:57,273 SelfSignedCertificate.java:253 - Failed to
generate a self-signed X.509 certificate using sun.security.x509:
java.lang.UnsupportedOperationException: OpenJdkSelfSignedCertGenerator not
supported on the used JDK version
at
io.netty.handler.ssl.util.OpenJdkSelfSignedCertGenerator.generate(OpenJdkSelfSignedCertGenerator.java:167)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:251)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:166)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:115)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:90)
at
org.apache.cassandra.security.SSLFactoryTest.<clinit>(SSLFactoryTest.java:67)
{code}
or simply (this one is more prevalent)
{code}
java.lang.NoClassDefFoundError: Could not initialize class
org.apache.cassandra.security.SSLFactoryTest
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)
at
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at
java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499)
at
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:480)
at
org.junit.runners.BlockJUnit4ClassRunner.createTest(BlockJUnit4ClassRunner.java:217)
{code}
On Java 11 it works.
> Investigate bcprov-jdk18on-1.76.jar: CVE-2024-30172, CVE-2024-30171,
> CVE-2024-29857, CVE-2024-34447
> ---------------------------------------------------------------------------------------------------
>
> Key: CASSANDRA-19739
> URL: https://issues.apache.org/jira/browse/CASSANDRA-19739
> Project: Cassandra
> Issue Type: Task
> Components: Build
> Reporter: Stefan Miklosovic
> Assignee: Stefan Miklosovic
> Priority: Normal
> Fix For: 5.0-rc, 5.x
>
>
> This came up after I bumped dependency-check version to 10.0.0 as suggested
> in CASSANDRA-19738.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
