Re: JDK 17 Early Access build 28 & JDK 18 build 3 are available

[Enrico Olivelli]

Sorry for the late reply.

I had reported a problem with Zookeeper TLS tests and the JDK17.
The problem was about OCSP.

I finally had time to track down the failure and basically the reason is
that in JDK17 the OCSP request
is sent inside the URI of the HTTP request and not inside the BODY.

We have a test case that implements a mock OCSP server and it was
implementing only support for OSCP requests passed in the BODY

With this patch the test is passing
https://github.com/apache/zookeeper/pull/1724

It looks like ZooKeeper is in very good shape with JDK17-EA (tested on Mac
and on Linux)

Enrico


Il giorno ven 25 giu 2021 alle ore 10:25 Rory O'Donnell <
rory.odonn...@oracle.com> ha scritto:

>
> Hi Enrico, **
>
> *
> *
>
> *Per the JDK 17 schedule , we are in Rampdown Phase One.*
>
>
> *Please advise if you find any issues while testing the latest Early
> Access builds.*
>
>
> The overall feature set is frozen. No further JEPs will be targeted to
> this release.
>
>   * Features integrated in JDK 17:
>
>   o JEP 306: Restore Always-Strict Floating-Point Semantics
> 
>   o JEP 356: Enhanced Pseudo-Random Number Generators
> 
>   o JEP 382: New macOS Rendering Pipeline
> 
>   o JEP 391: macOS/AArch64 Port 
>   o JEP 398: Deprecate the Applet API for Removal
> 
>   o JEP 403: Strongly Encapsulate JDK Internals
> 
>   o JEP 406: Pattern Matching for switch (Preview)
> 
>   o JEP 407: Remove RMI Activation 
>   o JEP 409: Sealed Classes 
>   o JEP 410: Remove the Experimental AOT and JIT Compiler
> 
>   o JEP 411: Deprecate the Security Manager for Removal
> 
>   o JEP 412: Foreign Function & Memory API (Incubator)
> 
>   o JEP 414: Vector API (Second Incubator)
> 
>   o JEP 415: Context-Specific Deserialization Filters
> 
>
>
> *OpenJDK 17 Early Access build 28 is available at
> **https://jdk.java.net/17* 
>
>   * These early-access , open-source builds are provided under the
>   o GNU General Public License, version 2, with the Classpath
> Exception 
>   * Release Notes are available at https://jdk.java.net/17/release-notes
> 
>   * Changes in build 28 that maybe of interest:
>   o *JDK-8269028: [BACKOUT] JDK-8196415 Disable SHA-1 Signed JARs *
>   o JDK-8268774: Residual logging output written to STDOUT, not
> STDERR [*Reported by Apache Ant*]
>   o JDK-8264843: Javac crashes with NullPointerException when
> finding unencoded XML in  tag [*Reported by Apache Lucene*]
>
>
> *OpenJDK 18 Early Access build 3 is now available at
> **https://jdk.java.net/18* 
>
>   * These early-access , open-source builds are provided under the
>   o GNU General Public License, version 2, with the Classpath
> Exception 
>   * Changes in recent builds that maybe of interest:
>   o JDK-8266791: Annotation property which is compiled as an array
> property but changed to a single element throws NPE [*Reported
> by Byte Buddy*]
>   * Coming in a future JDK 18 build
>   o Removal of Biased Locking in JDK 18  - Details
> 
>
> *Other Topics of Interest: *
>
>   * State of Loom: https://www.youtube.com/watch?v=KG24inClY2M
> 
>   * State of Panama: https://www.youtube.com/watch?v=B8k9QGvPxC0
> 
>   * What's a JEP: https://www.youtube.com/watch?v=l1VrmvyIEpM
> 
>
>
> *Quality Report for June 2021 was published here [1]. ***
>
>   * Thanks to everyone who contributed by creating features or
> enhancements, logging bugs, or downloading and testing the
> early-access builds.
>
> Rgds,Rory
>
> [1]
>
> https://wiki.openjdk.java.net/display/quality/Quality+Outreach+Report+June+2021*
> *
>
> --
> Rgds, Rory O'Donnell
> Quality Engineering Manager
> Oracle EMEA, Dublin, Ireland
>
>

[jira] [Created] (ZOOKEEPER-4333) QuorumSSLTest - testOCSP fails on JDK17

[Enrico Olivelli (Jira)]

Enrico Olivelli created ZOOKEEPER-4333:
--

 Summary: QuorumSSLTest - testOCSP fails on JDK17
 Key: ZOOKEEPER-4333
 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4333
 Project: ZooKeeper
  Issue Type: Test
  Components: security, tests
Affects Versions: 3.6.2
Reporter: Enrico Olivelli
Assignee: Enrico Olivelli
 Fix For: 3.8.0, 3.7.1


On JDK17 (early access) QuorumSSLTest#tetOCSP fails because with JDK17 the TLS 
client is sending a OCSP request as GET on the URI.

 

Previously the OCSP request was send inside the BODY of the HTTP request.

 

In order to fix the test we have to fix our mock HTTP OCSP server (that is part 
of the test suite, it is not zookeeper server code) in order to handle this 
case.


For reference:
https://it.wikipedia.org/wiki/Online_Certificate_Status_Protocol

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)