Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-9437

Revert cypher suite update

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 1.5.0
    • Fix Version/s: 1.5.1
    • Component/s: Runtime / Coordination
    • Labels:
      None

      Description

      The changes of FLINK-9310 causes Flink to fail when sending data between TaskManagers as reported by a user [1]. The problem seems to be that Netty's SslHandler (v4.0.27) tries to allocate heap buffers when using a GCM enabled cypher suite. However, since we explicitly prohibit the allocation of heap buffers it fails. In later Netty versions, this behaviour seems to be fixed.

      I propose to revert the changes of FLINK-9310 and set the default cypher algorithm to TLS_RSA_WITH_AES_128_CBC_SHA.

      [1] http://apache-flink-mailing-list-archive.1008284.n3.nabble.com/Flink-1-5-Job-fails-to-execute-in-multiple-taskmanagers-parallelism-gt-1-td22467.html

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                trohrmann Till Rohrmann
                Reporter:
                trohrmann Till Rohrmann
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: