[ 
https://issues.apache.org/jira/browse/NIFI-2618?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15431321#comment-15431321
 ] 

Joe Skora commented on NIFI-2618:
---------------------------------

NIFI-2503 back ported patch from 1.0 but the default TLS version is different 
depending on the JDK version.

tl;dr:  I'm looking into whether this test can adapt based on JVM version to 
verify correct behavior where supported but not fail where not supported.  If 
that doesn't work I'll disable or remove the test.

Prior to JDK 7u101 (or maybe u95) Java 7 didn't support changing the default 
TLS version.  But [Oracle Java 
7u101|http://www.oracle.com/technetwork/java/javase/documentation/javase7supportreleasenotes-1601161.html#R170_101]
 and [OpenJDK 7u101|https://bugs.openjdk.java.net/browse/JDK-8076369] add the 
Java 8 system property 
[jdk.tls.client.protocols|https://blogs.oracle.com/java-platform-group/entry/diagnosing_tls_ssl_and_https]
 that allows configuration of the default TLS.  In unrelated testing, 
[~mosermw] and I have been able to use {{-Djdk.tls.client.protocols=TLSv1.2}} 
to make Java 7u101 default to TLSv1.2 similar to Java 8.  

> TestPostHTTPGroovy test in 0.x branch fails using Java 7
> --------------------------------------------------------
>
>                 Key: NIFI-2618
>                 URL: https://issues.apache.org/jira/browse/NIFI-2618
>             Project: Apache NiFi
>          Issue Type: Task
>          Components: Core Framework
>    Affects Versions: 0.7.0
>            Reporter: Michael Moser
>            Assignee: Joe Skora
>            Priority: Trivial
>
> The TestPostHTTPGroovy unit test testDefaultShouldPreferTLSv1_2 fails on the 
> 0.x branch when using Java 7 to build.  The default TLS in Java 7 is TLSv1.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to