[
https://issues.apache.org/jira/browse/IMPALA-14161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17986203#comment-17986203
]
ASF subversion and git services commented on IMPALA-14161:
----------------------------------------------------------
Commit cae90063ae08f4c9cd044e5e78ca98cfe2e2ad88 in impala's branch
refs/heads/master from Daniel Becker
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=cae90063a ]
IMPALA-14161: Thrift SSL tests fail on Centos 7
After the rebase of the Kudu code in to v1.17.1 (see IMPALA-14066), some
backend tests in thrift-server-test.cc stopped working on CentOs 7.9.
This is because the list of available TLS ciphers has been updated in
Kudu commit https://gerrit.cloudera.org/#/c/17268/, which was picked up
in the rebase.
This commit fixes the tests by making sure that the ThriftServers
started in the tests receive the list of ciphers.
Testing:
- tested the patch on CentOS 7.9.
Change-Id: I2ade7e7308c05baf640a6cbfd62d10f9689a5d9a
Reviewed-on: http://gerrit.cloudera.org:8080/23069
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Thrift SSL tests fail on Centos 7
> ---------------------------------
>
> Key: IMPALA-14161
> URL: https://issues.apache.org/jira/browse/IMPALA-14161
> Project: IMPALA
> Issue Type: Bug
> Components: Backend
> Affects Versions: Impala 5.0.0
> Reporter: Joe McDonnell
> Assignee: Daniel Becker
> Priority: Blocker
>
> Several backend tests for Thrift SSL started failing on Centos 7:
> {noformat}
> [ RUN ] SslTest.TLSVersionControl
> /data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 3, client version:
> tlsv1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 3, client version:
> tlsv1.1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 3, client version:
> tlsv1.2/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 4, client version:
> tlsv1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 4, client version:
> tlsv1.1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 4, client version:
> tlsv1.2/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 5, client version:
> tlsv1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 5, client version:
> tlsv1.1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 5, client version: tlsv1.2[ FAILED ] SslTest.TLSVersionControl
> (3 ms){noformat}
> The full list of failing tests is:
> {noformat}
> SslTest.ClientBeforeServer
> SslTest.TLSVersionControl
> PasswordProtectedPemFile.CorrectOperation
> KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/0
> KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/1{noformat}
> This started after the KRPC rebase, so it may be related.
> This is not seen on Redhat 8 or Ubuntu 20.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
