Spaceman1984 opened a new issue #4189:
URL: https://github.com/apache/cloudstack/issues/4189
<!--
Verify first that your issue/request is not already reported on GitHub.
Also test if the latest release and master branch are affected too.
Always add information AFTER of these HTML comments, but no need to delete
the comments.
-->
On a fresh installation of Fedora 31, running the NioTest will fail. This is
due to Fedora using 2048 as the minimum allowed size for a RSA key and
cloudstack generates a 1024 size key.
An upgrade has to be made to the certificate key size Cloudstack uses for
the test as 2048 is the recommended size for RSA keys at the moment and other
operating systems will likely make this a requirement as well.
I have verified the key size requirement in the following files:
/usr/share/crypto-policies/DEFAULT/java.txt
/usr/share/crypto-policies/FIPS/java.txt
/usr/share/crypto-policies/NEXT/java.txt
The NioTest passes when changing the RSA keySize to < 1024, but this doesn't
address the issue of Cloudstack generating a less secure certificate.
##### ISSUE TYPE
<!-- Pick one below and delete the rest -->
* Improvement Request
##### COMPONENT NAME
<!--
Categorize the issue, e.g. API, VR, VPN, UI, etc.
-->
~~~
NioTest
~~~
##### CLOUDSTACK VERSION
<!--
New line separated list of affected versions, commit ID for issues on master
branch.
-->
~~~
Tested on 4.13.0.2
~~~
##### CONFIGURATION
<!--
Information about the configuration if relevant, e.g. basic network,
advanced networking, etc. N/A otherwise
-->
##### OS / ENVIRONMENT
<!--
Information about the environment if relevant, N/A otherwise
-->
Fedora 31
Cloudstack 4.13 branch
Java 1.8
Python 2.7
##### STEPS TO REPRODUCE
<!--
For bugs, show exactly how to reproduce the problem, using a minimal
test-case. Use Screenshots if accurate.
For new features, show how the feature would be used.
-->
<!-- Paste example playbooks or commands between quotes below -->
~~~
Do a fresh install of Fedora,
Install Java 8
Install python2.7
Install git
Install maven
Clone Cloudstack 4.13 branch
Run mvn install -Pdeveloper,systemvm -Dnoredist
~~~
<!-- You can also paste gist.github.com links for larger files -->
##### EXPECTED RESULTS
<!-- What did you expect to happen when running the steps above? -->
~~~
Tests pass
~~~
##### ACTUAL RESULTS
<!-- What actually happened? -->
<!-- Paste verbatim command output between quotes below -->
~~~
Tests fail
~~~
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
