[
https://issues.apache.org/jira/browse/HBASE-29181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17950386#comment-17950386
]
Andor Molnar commented on HBASE-29181:
--------------------------------------
I can't imagine there's any success run of this test unless the FileWatcher
immediately notifies the server about SSL context change. It has a hardcoded 1
minute polling interval which needs to be elapsed before checking for file
change.
Either we should
* remove this test completely
* set up a hook in X509Util which lets the tests to be notified about file
changed event (each test will take 1 minute to complete)
* make the polling interval configurable and set up the hook
Client and Server regeneration test works, because neither the client nor the
server gets notified about the change while the test is running and they're
able to connect with old certificates.
cc [~bbeaudreault]
> TestNettyTLSIPCFileWatcher.testReplaceServerKeystore fails for some
> storeFileTypes
> ----------------------------------------------------------------------------------
>
> Key: HBASE-29181
> URL: https://issues.apache.org/jira/browse/HBASE-29181
> Project: HBase
> Issue Type: Bug
> Reporter: Abhishek Kothalikar
> Priority: Major
>
> While working on https://github.com/apache/hbase/pull/6414 found we have
> following pre-existing test failure:
> While running tests for one of my PRs
> https://github.com/apache/hbase/pull/6632 encountered following following
> pre-existing test failure.
>
> {code:java}
> [ERROR] Errors:
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[0:
> keyType=RSA, storeFileType=JKS]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:32799
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:42989
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:33535
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[1:
> keyType=RSA, storeFileType=PEM]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:46285
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:33897
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:40113
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[2:
> keyType=RSA, storeFileType=PKCS12]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:42793
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:39867
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:34601
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[3:
> keyType=RSA, storeFileType=BCFKS]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:33391
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:43125
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:45323
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[4:
> keyType=EC, storeFileType=JKS]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:45923
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:36491
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:36101
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[5:
> keyType=EC, storeFileType=PEM]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:44975
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:38567
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:42707
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[6:
> keyType=EC, storeFileType=PKCS12]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:41437
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:34165
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:35893
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> [ERROR]
> org.apache.hadoop.hbase.security.TestNettyTLSIPCFileWatcher.testReplaceServerKeystore[7:
> keyType=EC, storeFileType=BCFKS]
> [ERROR] Run 1: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:34549
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 2: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:37209
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [ERROR] Run 3: TestNettyTLSIPCFileWatcher.testReplaceServerKeystore:184 »
> Service javax.net.ssl.SSLHandshakeException: Call to address=localhost:36403
> failed on local exception: javax.net.ssl.SSLHandshakeException: PKIX path
> validation failed: java.security.cert.CertPathValidatorException: signature
> check failed
> [INFO]
> {code}
> Test testReplaceServerKeystore, passes for some storeFileTypes however, fails
> for the others. I tested this locally (without my changes) by running using
> feature branch "HBASE-29081" where tests failed.
> Additionally, these failure can be seen in some of the previous runs.Probably
> related to [https://github.com/apache/hbase/pull/6381
> |https://github.com/apache/hbase/pull/6381]but requires more investigation.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
