mateczagany commented on code in PR #29265:
URL: https://github.com/apache/flink/pull/29265#discussion_r4070530726


##########
flink-end-to-end-tests/test-scripts/common_ssl.sh:
##########
@@ -79,6 +79,11 @@ function _set_conf_ssl_helper {
 
     if [ "${provider}" = "OPENSSL" -a "${provider_lib}" = "dynamic" ]; then
         cp $FLINK_DIR/opt/flink-shaded-netty-tcnative-dynamic-*.jar 
$FLINK_DIR/lib/
+        # if the CI prepared a newer OpenSSL than the system one (see 
e2e-template.yml), prefer it;
+        # local/developer runs without that variable set keep using the system 
OpenSSL as before
+        if [ -n "${FLINK_E2E_OPENSSL32_LIB:-}" ]; then
+            export 
LD_LIBRARY_PATH="${FLINK_E2E_OPENSSL32_LIB}${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}"
+        fi
     elif [ "${provider}" = "OPENSSL" -a "${provider_lib}" = "static" ]; then

Review Comment:
   The licensing issue can be regarded as stale. BoringSSL has been Apache 
license for a time now, and the latest flink-shaded version makes it clear in 
the NOTICE files, and the fact that `flink-shaded-netty-tcnative-static` is 
released now to the public.
   
   The testing part I think is already kind of hard with unreleased versions of 
`flink-shaded`.
   
   Let's keep this out of this PR now, I think we already have enough work here 
already. I will create a JIRA to make testing unreleased versions of 
`flink-shaded` easier and do that in another PR, where I will address this too.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to