[ 
https://issues.apache.org/jira/browse/KNOX-422?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14137403#comment-14137403
 ] 

Larry McCay commented on KNOX-422:
----------------------------------

Hi [~poliva] - I have no doubt that it works and have tested it as well. The 
fact is that we only have a BC dependency within the ApacheDS component which 
is for testing purposes and not intended for production use. I have also noted 
that the same patch has been proposed to Hadoop and HBase. As far as I can tell 
HBase has decided to not add the dependency on BC and the Hadoop patch is still 
pending.

Java 9 is a while out so we will not be in danger of losing those classes and 
the use of reflection would enable the gateway to run on an IBM JVM. Even in 
Java 9, those classes will likely be available with the use of a special switch 
to enable access to them.

It is relevant to note exactly what this generated cert is used for - and it 
may not be that obvious from the code. It is very limited in the details of the 
generated DN and is only intended for test/dev deployment convenience. It 
generates a cert for localhost which limits its use for production drastically.

What I propose allows the gateway to run on JVMs that lack the sun classes by 
halting startup until a keystore is put in place with your favorite tooling - 
which is likely done for anything but the most basic demo instances anyway.

> Build break with JVM IBM JAVA
> -----------------------------
>
>                 Key: KNOX-422
>                 URL: https://issues.apache.org/jira/browse/KNOX-422
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Build
>    Affects Versions: 0.4.0
>         Environment: RHEL 7 - power pc 64 - maven 3.2.1 - Java home: 
> /home/jdk/ibm/ibm-java-ppc64-71/jre
>            Reporter: pascal oliva
>             Fix For: 0.5.0
>
>         Attachments: KNOX-422-1.patch
>
>
> The build failed with JVM IBM JAVA : Java version: 1.7.0, vendor: IBM 
> Corporation
> [INFO] 30 errors
> [INFO] -------------------------------------------------------------
> [INFO] 
> ------------------------------------------------------------------------
> [INFO] Reactor Summary:
> [INFO]
> [INFO] gateway ........................................... SUCCESS [  0.510 s]
> [INFO] gateway-test-utils ................................ SUCCESS [  1.631 s]
> [INFO] gateway-i18n ...................................... SUCCESS [  0.290 s]
> [INFO] gateway-util-common ............................... SUCCESS [  0.566 s]
> [INFO] gateway-util-launcher ............................. SUCCESS [  0.190 s]
> [INFO] gateway-util-urltemplate .......................... SUCCESS [  0.345 s]
> [INFO] gateway-test-ldap ................................. SUCCESS [  0.349 s]
> [INFO] gateway-test-ldap-launcher ........................ SUCCESS [  0.030 s]
> [INFO] gateway-i18n-logging-log4j ........................ SUCCESS [  0.064 s]
> [INFO] gateway-i18n-logging-sl4j ......................... SUCCESS [  0.060 s]
> [INFO] gateway-spi ....................................... FAILURE [  0.701 s]
> ...
> [ERROR] COMPILATION ERROR :
> [INFO] -------------------------------------------------------------
> [ERROR] 
> /home/pascal/release/ibmsoe/knox/gateway-spi/src/main/java/org/apache/hadoop/gateway/services/security/impl/BaseKeystoreService.java:[88,9]
>  cannot find symbol
>   symbol:   class X509CertInfo
> ...
> On 
> /home/pascal/release/ibmsoe/knox/gateway-spi/src/main/java/org/apache/hadoop/gateway/services/security/impl/BaseKeystoreService.java
> import sun.security.x509.*; is not available with the JVM IBM JAVA



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to