[
https://issues.apache.org/jira/browse/HDDS-1157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17512209#comment-17512209
]
Tsz-wo Sze commented on HDDS-1157:
----------------------------------
TestOzoneContainerWithTLS will fail with the
javax.net.ssl.SSLHandshakeException below if we simply remove the {{@Ignore}}
tag.
{code}
Caused by: javax.net.ssl.SSLHandshakeException: error:1000012e:SSL
routines:OPENSSL_internal:KEY_USAGE_BIT_INCORRECT
at
org.apache.ratis.thirdparty.io.netty.handler.ssl.ReferenceCountedOpenSslEngine.sslReadErrorResult(ReferenceCountedOpenSslEngine.java:1347)
{code}
Tried some (ugly) hack to setup SslContext using some generated key/cert files.
TestOzoneContainerWithTLS can pass with the hack. Therefore, it seems like
there are bugs in setting up keys and certs. Not sure if the bug is in the
production code or in the test.
> TestOzoneContainerWithTLS is failing due to the missing native libraries
> ------------------------------------------------------------------------
>
> Key: HDDS-1157
> URL: https://issues.apache.org/jira/browse/HDDS-1157
> Project: Apache Ozone
> Issue Type: Bug
> Reporter: Marton Elek
> Assignee: Marton Elek
> Priority: Major
>
> When we use an alpine based (docker-in-docker) contain to build the native
> tls library can't be found:
> {code:java}
> java.lang.UnsatisfiedLinkError: failed to load the required native library
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.OpenSsl.ensureAvailability(OpenSsl.java:346)
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.ReferenceCountedOpenSslContext.<init>(ReferenceCountedOpenSslContext.java:202)
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.OpenSslContext.<init>(OpenSslContext.java:43)
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.OpenSslServerContext.<init>(OpenSslServerContext.java:347)
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.OpenSslServerContext.<init>(OpenSslServerContext.java:335)
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.SslContext.newServerContextInternal(SslContext.java:422)
> at
> org.apache.ratis.thirdparty.io.netty.handler.ssl.SslContextBuilder.build(SslContextBuilder.java:447)
> at org.apache.ratis.grpc.server.GrpcService.<init>(GrpcService.java:123)
> at org.apache.ratis.grpc.server.GrpcService.<init>(GrpcService.java:85)
> at
> org.apache.ratis.grpc.server.GrpcService.<init>(GrpcService.java:47){code}
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
