[
https://issues.apache.org/jira/browse/NUTCH-3232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18136244#comment-18136244
]
ASF GitHub Bot commented on NUTCH-3232:
---------------------------------------
github-actions[bot] commented on PR #986:
URL: https://github.com/apache/nutch/pull/986#issuecomment-6567069136
## Apache Yetus test-patch report
| |
|------------|
| +1 overall |
| | | | |
|
|------|------------|---------|-----|---------------------------------------------------|
| Vote | Subsystem | Runtime | Log | Comment
|
| | | | | Prechecks
|
| +1 | dupname | 0m 0s | | No case conflicting files found.
|
| +1 | @author | 0m 0s | | The patch does not contain any @author
tags. |
| | | | | master Compile Tests
|
| | | | | Patch Compile Tests
|
| +1 | codespell | 0m 1s | | No new issues.
|
| +1 | detsecrets | 0m 16s | | No new issues.
|
| +1 | blanks | 0m 0s | | The patch has no blanks issues.
|
| +1 | xmllint | 0m 0s | | No new issues.
|
| | | | | Other Tests
|
| +1 | asflicense | 0m 1s | | The patch does not generate ASF
License warnings. |
| | | 0m 22s | |
|
| |
|
|----------------|---------------------------------------------------------------------------------------------------------------------------------|
| Subsystem | Report/Notes
|
| GITHUB PR | https://github.com/apache/nutch/pull/986
|
| Optional Tests | dupname asflicense codespell detsecrets xmllint
|
| uname | Linux afe0a5041b17 7.0.0-1017-azure \#17~24.04.1-Ubuntu
SMP PREEMPT Thu Sep 24 18:46:57 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | nobuild
|
| Personality | /github/workspace/.yetus/personality.sh
|
| git revision | master / cf8d17e6b8c33b5abc3eeb0a37abb6b8f66be961
|
| modules | C: . U: .
|
| versions | git=2.34.1 codespell=2.4.1 detsecrets=1.5.0 xmllint=20913
|
| Powered by | Apache Yetus 0.15.1 https://yetus.apache.org
|
This message was automatically generated.
<!
> Upgrade OkHttp to 5.5.1
> -----------------------
>
> Key: NUTCH-3232
> URL: https://issues.apache.org/jira/browse/NUTCH-3232
> Project: Nutch
> Issue Type: Improvement
> Components: plugin, protocol
> Affects Versions: 1.23
> Reporter: Hande Celikkanat
> Priority: Major
>
> Upgrade the OkHttp dependencies of protocol-okhttp (okhttp, okhttp-brotli,
> okhttp-zstd) from 5.4.0 to 5.5.1. This also upgrades Okio from 3.17.0 to
> 3.18.1.
> Notable changes since 5.4.0 (https://lysine.dev/okhttp/changelogs/changelog/):
> - 5.5.1 blocks 8 compromised eMudhra intermediate certificates
> (CVE-2026-111943).
> - 5.5.0 makes the default hostname verifier reject hosts that fail IP
> canonicalization.
> Note: OkHttp 5.5.1 applies the blocklist after hostname verification and
> independently of the trust manager, so protocol-okhttp rejects servers
> presenting one of the blocked certificates even when
> http.tls.certificates.check is false. The hostname verifier change in 5.5.0
> applies when http.tls.certificates.check is true, which is the default since
> NUTCH-3221.
> Behavior change, checked against a test server from the disclosure site that
> presents one of the blocked certificates, with certificate checks disabled
> (http.tls.certificates.check=false, the default before NUTCH-3221):
> {noformat}
> bin/nutch parsechecker -Dhttp.agent.name=test-crawler \
> -Dhttp.tls.certificates.check=false \
> -Dplugin.includes='protocol-okhttp|parse-(html|tika)'
> https://dv-g3b-emudhra.we-have-a-problem.com/
> {noformat}
> OkHttp 5.4.0 (master):
> {noformat}
> Status: success(1,0)
> {noformat}
> OkHttp 5.5.1 (this change):
> {noformat}
> Fetch failed with protocol status: exception(16), lastModified=0:
> javax.net.ssl.SSLPeerUnverifiedException: Hostname
> dv-g3b-emudhra.we-have-a-problem.com not verified (blocklisted by OkHttp)
> {noformat}
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
