lhotari opened a new issue #8580:
URL: https://github.com/apache/pulsar/issues/8580
**Describe the bug**
There's some issue with Pulsar when TLS 1.3 is available. JDK versions since
8u261 bundle TLS 1.3 .
One sign of the issues is that ProxyKeyStoreTlsTestWithAuth and
ProxyKeyStoreTlsTestWithoutAuth fail when TLS1.3 is available.
Underlying exception is:
```
java.nio.channels.ClosedChannelException: null
at
io.netty.handler.ssl.SslHandler.channelInactive(SslHandler.java:1105)
[netty-handler-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:262)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:248)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelInactive(AbstractChannelHandlerContext.java:241)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.DefaultChannelPipeline$HeadContext.channelInactive(DefaultChannelPipeline.java:1405)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:262)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:248)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.DefaultChannelPipeline.fireChannelInactive(DefaultChannelPipeline.java:901)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.channel.AbstractChannel$AbstractUnsafe$8.run(AbstractChannel.java:818)
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:164)
[netty-common-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:472)
[netty-common-4.1.51.Final.jar:4.1.51.Final]
at io.netty.channel.epoll.EpollEventLoop.run(EpollEventLoop.java:384)
[netty-transport-native-epoll-4.1.51.Final-linux-x86_64.jar:4.1.51.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989)
[netty-common-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[netty-common-4.1.51.Final.jar:4.1.51.Final]
at
io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
[netty-common-4.1.51.Final.jar:4.1.51.Final]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_272]
```
**To Reproduce**
Steps to reproduce the behavior:
Install Java JDK equal or newer than 8u261, for example 8u272
```
git clone --depth 1 https://github.com/apache/pulsar
cd pulsar
mvn -B -ntp -DskipTests -Pcore-modules install
mvn -B -ntp test -pl pulsar-proxy -DtestForkCount=1 -DtestReuseFork=true
-Dinclude="**/ProxyKeyStoreTlsTestWith*.java" -DredirectTestOutputToFile=false
```
**Expected behavior**
Java 8 with TLS 1.3 implementation should be supported for Pulsar
development and also at runtime.
Currently it's unclear whether the TLS 1.3 availability causes some other
issues at Pulsar runtime.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]