[ 
https://issues.apache.org/jira/browse/KNOX-422?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14135569#comment-14135569
 ] 

Larry McCay commented on KNOX-422:
----------------------------------

While the sun classes are in danger of being blocked, I'm not convinced that 
there is enough justification to pull in a whole new java crypto library in 
support of this convenience aspect of the initial startup. I've actually come 
to feel that we should remove the auto generation of the certificate from the 
start up and make it a provisioning step external from the gateway runtime.

That said, not being able to run or build Knox against/on the IBM JDK is 
something that needs to be addressed. My proposal is that in the near term we 
refactor the existing code to be done with reflection when the sun classes are 
available and when they aren't that we halt the server start and indicate that 
the SSL provisioning must be done or SSL must be disabled. This will provide 
the opportunity for IBM environments to use KeyMan or whatever their favorite 
keystore tooling is.

[~poliva] would you be interested in providing a patch that converts the 
existing generation logic to reflection in order to allow Knox to run on the 
IBM JVM?

> Build break with JVM IBM JAVA
> -----------------------------
>
>                 Key: KNOX-422
>                 URL: https://issues.apache.org/jira/browse/KNOX-422
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Build
>    Affects Versions: 0.4.0
>         Environment: RHEL 7 - power pc 64 - maven 3.2.1 - Java home: 
> /home/jdk/ibm/ibm-java-ppc64-71/jre
>            Reporter: pascal oliva
>             Fix For: 0.5.0
>
>         Attachments: KNOX-422-1.patch
>
>
> The build failed with JVM IBM JAVA : Java version: 1.7.0, vendor: IBM 
> Corporation
> [INFO] 30 errors
> [INFO] -------------------------------------------------------------
> [INFO] 
> ------------------------------------------------------------------------
> [INFO] Reactor Summary:
> [INFO]
> [INFO] gateway ........................................... SUCCESS [  0.510 s]
> [INFO] gateway-test-utils ................................ SUCCESS [  1.631 s]
> [INFO] gateway-i18n ...................................... SUCCESS [  0.290 s]
> [INFO] gateway-util-common ............................... SUCCESS [  0.566 s]
> [INFO] gateway-util-launcher ............................. SUCCESS [  0.190 s]
> [INFO] gateway-util-urltemplate .......................... SUCCESS [  0.345 s]
> [INFO] gateway-test-ldap ................................. SUCCESS [  0.349 s]
> [INFO] gateway-test-ldap-launcher ........................ SUCCESS [  0.030 s]
> [INFO] gateway-i18n-logging-log4j ........................ SUCCESS [  0.064 s]
> [INFO] gateway-i18n-logging-sl4j ......................... SUCCESS [  0.060 s]
> [INFO] gateway-spi ....................................... FAILURE [  0.701 s]
> ...
> [ERROR] COMPILATION ERROR :
> [INFO] -------------------------------------------------------------
> [ERROR] 
> /home/pascal/release/ibmsoe/knox/gateway-spi/src/main/java/org/apache/hadoop/gateway/services/security/impl/BaseKeystoreService.java:[88,9]
>  cannot find symbol
>   symbol:   class X509CertInfo
> ...
> On 
> /home/pascal/release/ibmsoe/knox/gateway-spi/src/main/java/org/apache/hadoop/gateway/services/security/impl/BaseKeystoreService.java
> import sun.security.x509.*; is not available with the JVM IBM JAVA



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to