I'll see what I can do tonight on my other machine. On Mon, Jul 23, 2018 at 11:31 AM, Uwe Schindler <[email protected]> wrote: > Erick, > > if you want to help: > Could you install OpenJDK 11 build 23 and run the failing Solr SSL tests with > it. It's not easy, because SSL is randomized, but if you choose one that in > the "always failing" list, then run it in isolation and do the following: > > ++++++++++++++++++++ > Is there a way to capture the output when running with > -Djavax.net.debug=all ? That would be useful to get a bit more detail on > what is going on. > > There are several threads on security-dev right now discussing issues > around TLS 1.3 and the handshake. Simone Bordet from the Jetty team is > involved in one or two threads as there seems to be some interop issues > that are being discussed. It's possible that you are running into > something in this area but I can't say for sure. > > -Alan > +++++++++++++++++++++ > > Alan Bateman asked me, but I am a bit busy (just came back from vacation). So > it would be very helpful to share the output. > > Uwe > > > ----- > Uwe Schindler > Achterdiek 19, D-28357 Bremen > http://www.thetaphi.de > eMail: [email protected] > >> -----Original Message----- >> From: Uwe Schindler <[email protected]> >> Sent: Monday, July 23, 2018 8:28 PM >> To: [email protected] >> Subject: RE: Those scary "25 tests failed" e-mails >> >> Hi, >> >> If those tests are only failing with Java 11-ea, it's the SSL handshake bug >> in >> the JDK currently under investigation. The Jetty people are working on it. We >> might need to update Jetty to make it compatible with Java 11, the LTS >> release of Java! >> >> If the test fails directly or indirectly with SSLHandshakeException (or >> similar, >> it’s the JDK bug). >> >> Uwe >> >> ----- >> Uwe Schindler >> Achterdiek 19, D-28357 Bremen >> http://www.thetaphi.de >> eMail: [email protected] >> >> > -----Original Message----- >> > From: Erick Erickson <[email protected]> >> > Sent: Monday, July 23, 2018 7:31 PM >> > To: [email protected] >> > Subject: Those scary "25 tests failed" e-mails >> > >> > Please take a look at these when you see them. They are _NOT_ just >> > "something went horribly wrong with a test run". >> > >> > It doesn't take long, just drop to the bottom of the e-mail and you'll >> > see something like: >> > >> > [repro] 4/5 failed: >> > org.apache.solr.ltr.store.rest.TestModelManagerPersistence >> > [repro] 5/5 failed: org.apache.solr.cloud.LegacyCloudClusterPropTest >> > [repro] 5/5 failed: org.apache.solr.cloud.TestMiniSolrCloudClusterSSL >> > [repro] 5/5 failed: org.apache.solr.handler.TestReplicationHandler >> > >> > which should get some immediate attention if they fail that often. >> > >> > Erick >> > >> > --------------------------------------------------------------------- >> > To unsubscribe, e-mail: [email protected] >> > For additional commands, e-mail: [email protected] >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] >
--------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
