Am 19.07.2019 um 13:22 schrieb Rémy Maucherat:
On Fri, Jul 19, 2019 at 12:20 PM Rainer Jung <rainer.j...@kippdata.de <mailto:rainer.j...@kippdata.de>> wrote:

    I have the same problem (Java version needed for TLS based downloads)
    here for TC 7 and decided to split my build scripts in a download phase
    using higher Java and the build phase using minimal Java. I think we
    should use our java.7.home property for the download steps.


I was thinking about splitting off the download phase as well, but this requires some work on the CI script.

I just saw there is already a download-deps target, that contains all I run in front for TC 7. So running "ant download-deps" with Java 7 and the appropriate ANT_OPTS up front in the CI script is worth trying. For TC 8.5 just using the ANT_OPTS should work (plus making sure, the CA cert store is populated correctly).

Regards,

Rainer

    For TC 7 I currently run the following targets using Java 7 instead
    of 6:

    ant download-dist
    ant download-validate
    ant download-compile
    ant download-test-compile
    ant download-cobertura
    ant extras-commons-logging-prepare
    ant extras-webservices-prepare

    In addition, some time back I decided to set ANT_OPTS which worked
    around any download problems using Java 7. As ANT_OPTS for TC9, TC8.5
    and the Java 7 parts of TC 7 I use:

    -Djavax.net.ssl.trustStore=/path/to/my/cacerts
    -Djavax.net.ssl.trustStorePassword=mypass
    -Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2

    and for the Java 6 parts of TC 7 build the last part switches to

    -Dhttps.protocols=TLSv1

    (not sure that's needed)

    For the above TC 7 download steps, I also add to ANT_OPTS:

    -Dno.build.dbcp=true

    With that build recent versions worked for me.

    Regards,

    Rainer

    Am 19.07.2019 um 11:49 schrieb Rémy Maucherat:
     > On Tue, Jul 16, 2019 at 11:10 PM Rémy Maucherat <r...@apache.org
    <mailto:r...@apache.org>
     > <mailto:r...@apache.org <mailto:r...@apache.org>>> wrote:
     >
     >     On Tue, Jul 16, 2019 at 10:56 PM Mark Thomas
    <ma...@apache.org <mailto:ma...@apache.org>
     >     <mailto:ma...@apache.org <mailto:ma...@apache.org>>> wrote:
     >
     >         We need to ask infra to add wine to the list of packages
     >         installed on that box. That will need an INFRA jira ticket.
     >
     >
     >     Ok.
     > https://issues.apache.org/jira/browse/INFRA-18759
     >
     >
     > One last issue was downloads. We're directly downloading directly
    from
     > different websites, some of which apparently have secure TLS
     > configurations. It works with 1.8 but not with previous JDKs (with
     > various errors). I didn't if things were fixable, so I instead
     > temporarily switched to 1.8 to go over the download phase. I will
    revert
     > to use 1.6 and 1.7 once the 8.5 periodic build is done in about two
     > hours (I didn't know there were periodic builds - daily, BTW).
     >
     > https://ci.apache.org/builders/tomcat-trunk
     > (https://ci.apache.org/projects/tomcat/tomcat9/docs/changelog.html)
     > https://ci.apache.org/builders/tomcat-trunk-periodic
     > https://ci.apache.org/builders/tomcat-85-trunk
     > (https://ci.apache.org/projects/tomcat/tomcat85/docs/changelog.html)
     > https://ci.apache.org/builders/tomcat-85-trunk-periodic
     > https://ci.apache.org/builders/tomcat-7-trunk
     > (https://ci.apache.org/projects/tomcat/tomcat7/docs/changelog.html)
     >
     > Rémy

    ---------------------------------------------------------------------
    To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
    <mailto:dev-unsubscr...@tomcat.apache.org>
    For additional commands, e-mail: dev-h...@tomcat.apache.org
    <mailto:dev-h...@tomcat.apache.org>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to