Devin G. Bost created SQOOP-3389:
------------------------------------
Summary: Unable to build Sqoop 1.4.7 due to upstream TLS 1.2 issue
Key: SQOOP-3389
URL: https://issues.apache.org/jira/browse/SQOOP-3389
Project: Sqoop
Issue Type: Bug
Components: build
Affects Versions: 1.4.7
Environment: Sqoop 1.4.7
Java SDK 1.6.0_45
Ant 1.7.1
Windows 10 via MinGW64
Reporter: Devin G. Bost
When building Sqoop 1.4.7 with Java SDK 1.6.0_45 and Ant 1.7.1 on Windows in
MinGW64, I obtain these build errors:
[ivy:resolve] Server access Error: Remote host closed connection during
handshake
url=https://repository.cloudera.com/content/repositories/releases/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.pom
[ivy:resolve] Server access Error: Remote host closed connection during
handshake
url=https://repository.cloudera.com/content/repositories/releases/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.jar
[ivy:resolve] Server access Error: Remote host closed connection during
handshake
url=https://repository.cloudera.com/content/repositories/staging/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.pom
[ivy:resolve] Server access Error: Remote host closed connection during
handshake
url=[https://repository.cloudera.com/content/repositories/staging/org/apache/avro/avro-mapred/1.8.1/avro-mapred-1.8.1-hadoop2.jar]
I experienced similar build errors on a different project, which I traced to
this issue:
[https://stackoverflow.com/questions/21245796/javax-net-ssl-sslhandshakeexception-remote-host-closed-connection-during-handsh/22629008]
The problem, however, is that because this particular build of Sqoop requires
Java 1.6, TLS v1.2 is unsupported, according to here:
[https://stackoverflow.com/questions/33364100/how-to-use-tls-1-2-in-java-6]
which is a problem because some public repositories have dropped support for
TLS versions prior to 1.2, as reported here:
[https://github.com/Microsoft/vcpkg/issues/2969]
and here:
[https://blog.github.com/2018-02-23-weak-cryptographic-standards-removed/]
If it is impossible now to pull the upstream dependencies when building via Ant
due to TLS 1.2 being unsupported in Java 1.6, then this is a critical
dependency conflict.
If additional configuration steps are required to be able to successfully
build, they are not documented in any of the Sqoop documentation that I have
found.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
