Uploaded image for project: 'Calcite'
  1. Calcite
  2. CALCITE-2568

Ensure that IBM JDK TLS cipher list matches Oracle/OpenJDK for Travis CI

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: avatica-1.13.0
    • Component/s: avatica
    • Labels:
      None

      Description

      IBM JDK fails for o.a.c.a.SslDriverTest after update to Jetty 9.4.

      ERROR] testReadWrite[0](org.apache.calcite.avatica.SslDriverTest)  Time elapsed: 0.082 s  <<< ERROR!
      java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      
      [ERROR] testReadWrite[1](org.apache.calcite.avatica.SslDriverTest)  Time elapsed: 0.037 s  <<< ERROR!
      java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      

      This seems to be a difference between IBM JDK and Oracle/OpenJDK related to SSL_ vs TLS_ prefixes for ciphers. The fix for this is to force IBM JDK to honor the Oracle/OpenJDK prefixes.

      The Java property to add is:

      -Dcom.ibm.jsse2.overrideDefaultTLS=true

      Oracle/OpenJDK ignores the Java property so we can add the property to .travis.yml to get the tests to pass.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                krisden Kevin Risden
                Reporter:
                krisden Kevin Risden
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: