[ https://issues.apache.org/jira/browse/HADOOP-16016?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16735400#comment-16735400 ]
Akira Ajisaka edited comment on HADOOP-16016 at 1/7/19 3:03 AM: ---------------------------------------------------------------- Thanks [~jojochuang] and [~Jack-Lee] for the comments. Removing the DES ciphers does not fix the test. Rethinking this issue, I found the test failed because all of the {{excludeCiphers}} are regarded as weak and there are no cipher suite which can pass the client-side verification after JDK-8208350. Adding a strong cipher suite to {{excludeCiphers}} fixes this test failure. was (Author: ajisakaa): Thanks [~jojochuang] and [~Jack-Lee] for the comments. Removing the DES ciphers does not fix the test. This test fails because after JDK-8208350, all of the {{excludeCiphers}} are regarded as weak and there are no cipher suite which can pass the client-side verification. Adding a strong cipher suite to {{excludeCiphers}} fixes this test failure. > TestSSLFactory#testServerWeakCiphers sporadically fails in precommit builds > --------------------------------------------------------------------------- > > Key: HADOOP-16016 > URL: https://issues.apache.org/jira/browse/HADOOP-16016 > Project: Hadoop Common > Issue Type: Bug > Components: security, test > Environment: Java 1.8.0_191 or upper > Reporter: Jason Lowe > Assignee: Akira Ajisaka > Priority: Major > Attachments: HADOOP-16016-002.patch, HADOOP-16016.01.patch, > HADOOP-16016.03.patch > > > I have seen a couple of precommit builds across JIRAs fail in > TestSSLFactory#testServerWeakCiphers with the error: > {noformat} > [ERROR] TestSSLFactory.testServerWeakCiphers:240 Expected to find 'no > cipher suites in common' but got unexpected > exception:javax.net.ssl.SSLHandshakeException: No appropriate protocol > (protocol is disabled or cipher suites are inappropriate) > {noformat} -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org