[
https://issues.apache.org/jira/browse/KAFKA-12786?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17367690#comment-17367690
]
Uwe Eisele commented on KAFKA-12786:
------------------------------------
As of JDK 11.0.11, TLSv1.1 is disabled by default (see
https://bugs.openjdk.java.net/browse/JDK-8256490).
I was able to execute the test with JDK 11.0.10, but not with JDK 11.0.11 (see
https://github.com/ueisele/kafka/tree/fix/ssltransportlayertest/ci).
JDK 11.0.10
{code:java}
./ci/do_in_docker 11.0.10 ./gradlew clients:unitTest --tests
SslTransportLayerTest.testUnsupportedTLSVersion --rerun-tasks
...
> Task :clients:unitTest
SslTransportLayerTest > [1] tlsProtocol=TLSv1.2, useInlinePem=false PASSED
SslTransportLayerTest > [2] tlsProtocol=TLSv1.2, useInlinePem=true PASSED
SslTransportLayerTest > [3] tlsProtocol=TLSv1.3, useInlinePem=false PASSED
{code}
JDK 11.0.11
{code:java}
./ci/do_in_docker 11.0.11 ./gradlew clients:unitTest --tests
SslTransportLayerTest.testUnsupportedTLSVersion --rerun-tasks
...
> Task :clients:unitTest
org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[1]
failed, log available in
/home/appuser/kafka/clients/build/reports/testOutput/org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[1].test.stdout
SslTransportLayerTest > [1] tlsProtocol=TLSv1.2, useInlinePem=false FAILED
org.opentest4j.AssertionFailedError: Condition not met within timeout
15000. Metric not updated failed-authentication-total expected:<1.0> but
was:<0.0> ==> expected: <true> but was: <false>
at org.junit.jupiter.api.AssertionUtils.fail(AssertionUtils.java:55)
at org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:40)
at org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:193)
at
org.apache.kafka.test.TestUtils.lambda$waitForCondition$3(TestUtils.java:303)
at
org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:351)
at
org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:319)
at org.apache.kafka.test.TestUtils.waitForCondition(TestUtils.java:300)
at
org.apache.kafka.common.network.NioEchoServer.waitForMetrics(NioEchoServer.java:196)
at
org.apache.kafka.common.network.NioEchoServer.verifyAuthenticationMetrics(NioEchoServer.java:155)
at
org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(SslTransportLayerTest.java:644)
org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[2]
failed, log available in
/home/appuser/kafka/clients/build/reports/testOutput/org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[2].test.stdout
SslTransportLayerTest > [2] tlsProtocol=TLSv1.2, useInlinePem=true FAILED
org.opentest4j.AssertionFailedError: Condition not met within timeout
15000. Metric not updated failed-authentication-total expected:<1.0> but
was:<0.0> ==> expected: <true> but was: <false>
at org.junit.jupiter.api.AssertionUtils.fail(AssertionUtils.java:55)
at org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:40)
at org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:193)
at
org.apache.kafka.test.TestUtils.lambda$waitForCondition$3(TestUtils.java:303)
at
org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:351)
at
org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:319)
at org.apache.kafka.test.TestUtils.waitForCondition(TestUtils.java:300)
at
org.apache.kafka.common.network.NioEchoServer.waitForMetrics(NioEchoServer.java:196)
at
org.apache.kafka.common.network.NioEchoServer.verifyAuthenticationMetrics(NioEchoServer.java:155)
at
org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(SslTransportLayerTest.java:644)
org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[3]
failed, log available in
/home/appuser/kafka/clients/build/reports/testOutput/org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[3].test.stdout
SslTransportLayerTest > [3] tlsProtocol=TLSv1.3, useInlinePem=false FAILED
org.opentest4j.AssertionFailedError: Condition not met within timeout
15000. Metric not updated failed-authentication-total expected:<1.0> but
was:<0.0> ==> expected: <true> but was: <false>
at org.junit.jupiter.api.AssertionUtils.fail(AssertionUtils.java:55)
at org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:40)
at org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:193)
at
org.apache.kafka.test.TestUtils.lambda$waitForCondition$3(TestUtils.java:303)
at
org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:351)
at
org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:319)
at org.apache.kafka.test.TestUtils.waitForCondition(TestUtils.java:300)
at
org.apache.kafka.common.network.NioEchoServer.waitForMetrics(NioEchoServer.java:196)
at
org.apache.kafka.common.network.NioEchoServer.verifyAuthenticationMetrics(NioEchoServer.java:155)
at
org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(SslTransportLayerTest.java:644)
3 tests completed, 3 failed
{code}
To execute tests which require TLSv1.1 support with current JDKs, TLSv1.1 must
be removed from the `jdk.tls.disabledAlgorithms` security property in the
`java.security` configuration file.
I also tested this and in this case I could execute the test
testUnsupportedTlsVersion with the newest version of JDK 11.
This may also be the reason why the test no longer runs in JDK 16 (see
KAFKA-12790).
> Getting SslTransportLayerTest error
> ------------------------------------
>
> Key: KAFKA-12786
> URL: https://issues.apache.org/jira/browse/KAFKA-12786
> Project: Kafka
> Issue Type: Bug
> Components: unit tests
> Environment: Ububtu 20.04
> Reporter: Sibelle
> Priority: Major
> Labels: beginner
> Attachments: Error.png
>
>
> SaslAuthenticatorTest > testRepeatedValidSaslPlainOverSsl() PASSED
> org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[1]
> failed, log available in
> /kafka/clients/build/reports/testOutput/org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(Args)[1].test.stdout
> SslTransportLayerTest > [1] tlsProtocol=TLSv1.2, useInlinePem=false FAILED
> org.opentest4j.AssertionFailedError: Condition not met within timeout
> 15000. Metric not updated failed-authentication-total expected:<1.0> but
> was:<0.0> ==> expected: <true> but was: <false>
> at org.junit.jupiter.api.AssertionUtils.fail(AssertionUtils.java:55)
> at org.junit.jupiter.api.AssertTrue.assertTrue(AssertTrue.java:40)
> at org.junit.jupiter.api.Assertions.assertTrue(Assertions.java:193)
> at
> org.apache.kafka.test.TestUtils.lambda$waitForCondition$3(TestUtils.java:320)
> at
> org.apache.kafka.test.TestUtils.retryOnExceptionWithTimeout(TestUtils.java:368)
> at
> org.apache.kafka.test.TestUtils.waitForCondition(TestUtils.java:317)
> at
> org.apache.kafka.test.TestUtils.waitForCondition(TestUtils.java:301)
> at
> org.apache.kafka.common.network.NioEchoServer.waitForMetrics(NioEchoServer.java:196)
> at
> org.apache.kafka.common.network.NioEchoServer.verifyAuthenticationMetrics(NioEchoServer.java:155)
> at
> org.apache.kafka.common.network.SslTransportLayerTest.testUnsupportedTLSVersion(SslTransportLayerTest.java:644)
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
