[
https://issues.apache.org/jira/browse/CASSANDRA-19739?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17862392#comment-17862392
]
Stefan Miklosovic edited comment on CASSANDRA-19739 at 7/2/24 10:35 AM:
------------------------------------------------------------------------
moving it to test scope fails all tests in
org.apache.cassandra.security.SSLFactoryTest for {*}Java 17{*}.
https://app.circleci.com/pipelines/github/instaclustr/cassandra/4444/workflows/ff56cfa5-2cab-42c4-9926-69f9496d74fd/jobs/246921/tests
{code:java}
DEBUG [main] 2024-07-02 12:30:57,273 SelfSignedCertificate.java:253 - Failed to
generate a self-signed X.509 certificate using sun.security.x509:
java.lang.UnsupportedOperationException: OpenJdkSelfSignedCertGenerator not
supported on the used JDK version
at
io.netty.handler.ssl.util.OpenJdkSelfSignedCertGenerator.generate(OpenJdkSelfSignedCertGenerator.java:167)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:251)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:166)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:115)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:90)
at
org.apache.cassandra.security.SSLFactoryTest.<clinit>(SSLFactoryTest.java:67)
{code}
or simply (this one is more prevalent)
{code}
java.lang.NoClassDefFoundError: Could not initialize class
org.apache.cassandra.security.SSLFactoryTest
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method)
at
java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77)
at
java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at
java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499)
at
java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:480)
at
org.junit.runners.BlockJUnit4ClassRunner.createTest(BlockJUnit4ClassRunner.java:217)
{code}
On Java 11 it works.
was (Author: smiklosovic):
moving it to test scope fails all tests in
org.apache.cassandra.security.SSLFactoryTest for {*}Java 17{*}.
https://app.circleci.com/pipelines/github/instaclustr/cassandra/4444/workflows/ff56cfa5-2cab-42c4-9926-69f9496d74fd/jobs/246921/tests
{code:java}
DEBUG [main] 2024-07-02 12:30:57,273 SelfSignedCertificate.java:253 - Failed to
generate a self-signed X.509 certificate using sun.security.x509:
java.lang.UnsupportedOperationException: OpenJdkSelfSignedCertGenerator not
supported on the used JDK version
at
io.netty.handler.ssl.util.OpenJdkSelfSignedCertGenerator.generate(OpenJdkSelfSignedCertGenerator.java:167)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:251)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:166)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:115)
at
io.netty.handler.ssl.util.SelfSignedCertificate.<init>(SelfSignedCertificate.java:90)
at
org.apache.cassandra.security.SSLFactoryTest.<clinit>(SSLFactoryTest.java:67)
{code}
On Java 11 it works.
> Investigate bcprov-jdk18on-1.76.jar: CVE-2024-30172, CVE-2024-30171,
> CVE-2024-29857, CVE-2024-34447
> ---------------------------------------------------------------------------------------------------
>
> Key: CASSANDRA-19739
> URL: https://issues.apache.org/jira/browse/CASSANDRA-19739
> Project: Cassandra
> Issue Type: Task
> Components: Build
> Reporter: Stefan Miklosovic
> Assignee: Stefan Miklosovic
> Priority: Normal
> Fix For: 5.0-rc, 5.x
>
>
> This came up after I bumped dependency-check version to 10.0.0 as suggested
> in CASSANDRA-19738.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
