Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-16848

Latest docker testing image (20210809) does not default support TLSv1 and TLSv1.1

    XMLWordPrintableJSON

Details

    Description

      Since deployment of the latest docker testing image (20210809), ci-cassandra.a.o is failing a few tests, e.g.:

      • SSTableLoaderEncryptionOptionsTest.bulkLoaderCannotAgreeOnClientTLSProtocol
      • NativeTransportEncryptionOptionsTest.negotiatedProtocolMustBeAcceptedProtocolTest
      • InternodeEncryptionOptionsTest.negotiatedProtocolMustBeAcceptedProtocolTest

      Looking at the logs, the in-jvm node is starting up with

      JdkSslContext.java:97 - Default protocols (JDK): [TLSv1.2] 
      

      Running the test locally works, and the matching line is

      JdkSslContext.java:97 - Default protocols (JDK): [TLSv1.2, TLSv1.1, TLSv1]
      

      The docker image is using openjdk version "1.8.0_282".

      Upgrading and using 1.8.0_302 locally reproduces the failure.

      Attachments

        Activity

          People

            mck Michael Semb Wever
            mck Michael Semb Wever
            Michael Semb Wever
            Brandon Williams
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: