Details
-
Sub-task
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
1.18.0, 1.19.0
Description
In FLINK-33550 we discovered that the GHA runners provided by GitHub have a newer version of OpenSSL installed which caused errors in the SSL tests:
Certificate was added to keystore
Certificate was added to keystore
Certificate reply was installed in keystore
Error outputting keys and certificates
40F767F1D97F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:../crypto/evp/evp_fetch.c:349:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
Nov 14 15:39:21 [FAIL] Test script contains errors.
The workaround is to enable legacy algorithms using the -legacy parameter in 3.0.0+. We might need to check whether that works for older OpenSSL version (in Azure CI).