Attila Doroszlai created HDDS-16027:
---------------------------------------
Summary: Certificate host name check fails in
TestInterSCMGrpcProtocolService
Key: HDDS-16027
URL: https://issues.apache.org/jira/browse/HDDS-16027
Project: Apache Ozone
Issue Type: Task
Components: test
Reporter: Attila Doroszlai
Assignee: István Fajth
Upgrade to Netty 4.1.135 or later will trigger failure in
TestInterSCMGrpcProtocolService, probably related to a fix in Netty's [host
name
validation|https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9].
{code}
[ERROR] Tests run: 1, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 4.010 s
<<< FAILURE! -- in org.apache.hadoop.hdds.scm.ha.TestInterSCMGrpcProtocolService
[ERROR]
org.apache.hadoop.hdds.scm.ha.TestInterSCMGrpcProtocolService.testMTLSOnInterScmGrpcProtocolServiceAccess
-- Time elapsed: 3.971 s <<< ERROR!
...
Caused by: java.security.cert.CertificateException: No name matching localhost
found for SNIHostName=null and peerHost=localhost in the chain of 1
certificate(s): 1. subjectAlternativeNames=[], CN=service.
...
Caused by: java.security.cert.CertificateException: No name matching localhost
found
{code}
(This can be
[reproduced|https://github.com/adoroszlai/ozone/actions/runs/30453856330/job/90586833625#step:13:3257]
by bumping Ratis to 3.3.0 (RC1 for now).)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
