Uploaded image for project: 'Calcite'
  1. Calcite
  2. CALCITE-2568

Ensure that IBM JDK TLS cipher list matches Oracle/OpenJDK for Travis CI

Rank to TopRank to BottomVotersStop watchingWatchersConvert to sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: avatica-1.13.0
    • Component/s: avatica
    • Labels:
      None

      Description

      IBM JDK fails for o.a.c.a.SslDriverTest after update to Jetty 9.4.

      ERROR] testReadWrite[0](org.apache.calcite.avatica.SslDriverTest)  Time elapsed: 0.082 s  <<< ERROR!
      java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      
      [ERROR] testReadWrite[1](org.apache.calcite.avatica.SslDriverTest)  Time elapsed: 0.037 s  <<< ERROR!
      java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
      	at org.apache.calcite.avatica.SslDriverTest.testReadWrite(SslDriverTest.java:137)
      

      This seems to be a difference between IBM JDK and Oracle/OpenJDK related to SSL_ vs TLS_ prefixes for ciphers. The fix for this is to force IBM JDK to honor the Oracle/OpenJDK prefixes.

      The Java property to add is:

      -Dcom.ibm.jsse2.overrideDefaultTLS=true

      Oracle/OpenJDK ignores the Java property so we can add the property to .travis.yml to get the tests to pass.

        Attachments

        Issue Links

          Activity

          $i18n.getText('security.level.explanation', $currentSelection) Viewable by All Users
          Cancel

            People

            • Assignee:
              krisden Kevin Risden
              Reporter:
              krisden Kevin Risden

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment