zookeeper-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Patrick Hunt <ph...@apache.org>
Subject Recent ZK Jenkins failures due to SSL protocol changes on central
Date Thu, 21 Jun 2018 14:29:28 GMT
FYI - I believe we're seeing:
https://blog.sonatype.com/enhancing-ssl-security-and-http/2-support-for-central

------------
ivy-download:
      [get] Getting:
https://repo1.maven.org/maven2/org/apache/ivy/ivy/2.4.0/ivy-2.4.0.jar
      [get] To:
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34/src/java/lib/ivy-2.4.0.jar
      [get] Error getting
https://repo1.maven.org/maven2/org/apache/ivy/ivy/2.4.0/ivy-2.4.0.jar to
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34/src/java/lib/ivy-2.4.0.jar

BUILD FAILED
/home/jenkins/jenkins-slave/workspace/ZooKeeper_branch34/build.xml:392:
javax.net.ssl.SSLException: Received fatal alert: protocol_version
-----------------

It looks like we are ok with jdk 1.8+, and can mitigate 1.7, however 1.6
and earlier jdks have no option (aside turning off https usage which
doesn't appeal to me).

I can update the jenkins 1.7 based jobs. Thoughts on 1.6 and earlier?
Perhaps we should use this as an opportunity to explicitly/officially
discontinue support in the next version?
http://zookeeper.apache.org/doc/r3.4.12/zookeeperAdmin.html#sc_requiredSoftware

Patrick

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message