[ZOOKEEPER-4333] QuorumSSLTest - testOCSP fails on JDK17

• Type: Test
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.2
• Fix Version/s: 3.8.0, 3.7.1
• Component/s: security, tests
• Labels: pull-request-available
• Assignee: Enrico Olivelli
• Reporter: Enrico Olivelli
• Created: 10/Jul/21 13:42
• Updated: 29/Oct/22 20:01
• Resolved: 28/Jul/21 13:17

Description

On JDK17 (early access) QuorumSSLTest#tetOCSP fails because with JDK17 the TLS client is sending a OCSP request as GET on the URI.

 

Previously the OCSP request was send inside the BODY of the HTTP request.

 

In order to fix the test we have to fix our mock HTTP OCSP server (that is part of the test suite, it is not zookeeper server code) in order to handle this case.

For reference:
https://it.wikipedia.org/wiki/Online_Certificate_Status_Protocol

 

Issue Links

• Blocked: ZOOKEEPER-4628 CVE-2022-42003 CVE-2022-42004 HIGH: upgrade jackson-databind-2.13.3.jar to 2.13.4.1
• links to: GitHub Pull Request #1724