lhotari opened a new issue #8580:
URL: https://github.com/apache/pulsar/issues/8580


   **Describe the bug**
   
   There's some issue with Pulsar when TLS 1.3 is available. JDK versions since 
8u261 bundle TLS 1.3 .
   One sign of the issues is that ProxyKeyStoreTlsTestWithAuth and 
ProxyKeyStoreTlsTestWithoutAuth fail when TLS1.3 is available. 
   
   Underlying exception is:
   ```
   java.nio.channels.ClosedChannelException: null
        at 
io.netty.handler.ssl.SslHandler.channelInactive(SslHandler.java:1105) 
[netty-handler-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:262)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:248)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.AbstractChannelHandlerContext.fireChannelInactive(AbstractChannelHandlerContext.java:241)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.DefaultChannelPipeline$HeadContext.channelInactive(DefaultChannelPipeline.java:1405)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:262)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:248)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.DefaultChannelPipeline.fireChannelInactive(DefaultChannelPipeline.java:901)
 [netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.channel.AbstractChannel$AbstractUnsafe$8.run(AbstractChannel.java:818) 
[netty-transport-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:164)
 [netty-common-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:472)
 [netty-common-4.1.51.Final.jar:4.1.51.Final]
        at io.netty.channel.epoll.EpollEventLoop.run(EpollEventLoop.java:384) 
[netty-transport-native-epoll-4.1.51.Final-linux-x86_64.jar:4.1.51.Final]
        at 
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989)
 [netty-common-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) 
[netty-common-4.1.51.Final.jar:4.1.51.Final]
        at 
io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
 [netty-common-4.1.51.Final.jar:4.1.51.Final]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_272]
   ```
   
   **To Reproduce**
   Steps to reproduce the behavior:
   
   Install Java JDK equal or newer than 8u261, for example 8u272
   ```
   git clone --depth 1 https://github.com/apache/pulsar
   cd pulsar
   mvn -B -ntp -DskipTests -Pcore-modules install
   mvn -B -ntp test -pl pulsar-proxy -DtestForkCount=1 -DtestReuseFork=true 
-Dinclude="**/ProxyKeyStoreTlsTestWith*.java" -DredirectTestOutputToFile=false
   ```
   
   **Expected behavior**
   
   Java 8 with TLS 1.3 implementation should be supported for Pulsar 
development and also at runtime.
   Currently it's unclear whether the TLS 1.3 availability causes some other 
issues at Pulsar runtime.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to