[KUDU-3106] getEndpointChannelBindings() isn't working as expected with BouncyCastle

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0, 1.3.1, 1.4.0, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.7.1, 1.9.0, 1.10.0, 1.10.1, 1.11.0, 1.11.1
• Fix Version/s: 1.12.0
• Component/s: client, java, security
• Code Review: http://gerrit.cloudera.org:8080/15664
• Assignee: Alexey Serbin
• Reporter: Alexey Serbin
• Created: 06/Apr/20 21:21
• Updated: 24/Apr/20 22:37
• Resolved: 07/Apr/20 04:39

Description

With BouncyCastle 1.65 the code in https://github.com/apache/kudu/blob/25ae6c5108cc84289f69c467d862e298d3361ea8/java/kudu-client/src/main/java/org/apache/kudu/util/SecurityUtil.java#L136-L159 isn't working as expected throwing an exception:

java.lang.RuntimeException: cert uses unknown signature algorithm: SHA256WITHRSA

It seems BouncyCastle 1.65 converts the name of the certificate signature algorithm uppercase.