Uploaded image for project: 'Sqoop (Retired)'
  1. Sqoop (Retired)
  2. SQOOP-3389

Unable to build Sqoop 1.4.7 due to upstream TLS 1.2 issue

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Blocker
    • Resolution: Unresolved
    • 1.4.7
    • None
    • build
    • Sqoop 1.4.7

      Java SDK 1.6.0_45 

      Ant 1.7.1

      Windows 10 via MinGW64

    Description

      When building Sqoop 1.4.7 with Java SDK 1.6.0_45 and Ant 1.7.1 on Windows in MinGW64, I obtain these build errors:

      [ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/releases/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.pom
      [ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/releases/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.jar
      [ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/staging/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.pom
      [ivy:resolve] Server access Error: Remote host closed connection during handshake url=https://repository.cloudera.com/content/repositories/staging/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.jar

       

      I experienced similar build errors on a different project, which I traced to this issue: https://stackoverflow.com/questions/21245796/javax-net-ssl-sslhandshakeexception-remote-host-closed-connection-during-handsh/22629008

      The problem, however, is that because this particular build of Sqoop requires Java 1.6, TLS v1.2 is unsupported, according to here: https://stackoverflow.com/questions/33364100/how-to-use-tls-1-2-in-java-6

      which is a problem because some public repositories have dropped support for TLS versions prior to 1.2, as reported here: https://github.com/Microsoft/vcpkg/issues/2969

      and here: https://blog.github.com/2018-02-23-weak-cryptographic-standards-removed/

      If it is impossible now to pull the upstream dependencies when building via Ant due to TLS 1.2 being unsupported in Java 1.6, then this is a critical dependency conflict. 

      If additional configuration steps are required to be able to successfully build, they are not documented in any of the Sqoop documentation that I have found. 

       

       

      Attachments

        1. sqoop_build_errors.txt
          493 kB
          Devin G. Bost

        Activity

          People

            Unassigned Unassigned
            devin.bost Devin G. Bost
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: