Re: Hadoop & TLS 1.3

2020-03-06 Thread Steve Loughran
sorry, just checked the release notes of a JIRA, its 1.1.1 which breaks wildfly-1.0.4.Final "...to make abfs and adl connectors compatible with alpine linux and other platforms which have libssl1.1-1.1.1b-r1 as their native openssl implementation. see: HADOOP-16460. HADOOP-16438" As well as editi

Re: Hadoop & TLS 1.3

2020-03-05 Thread Akira Ajisaka
Hi Wei-Chiu, Now we are experimenting trunk with Java11 in our development cluster and the HttpFS supports TLS 1.3 without any specific configuration. We haven't done any performance tests. -Akira $ curl -I --tlsv1.3 --negotiate -u : "https:// :/webhdfs/v1/?op=liststatus" HTTP/1.1 401 Authentic

Re: Hadoop & TLS 1.3

2020-03-05 Thread Wei-Chiu Chuang
> > > abfs and s3a can now go via wildfly to use any native openssl 1.1 libraries > -if that supports TLS1.3 then maybe the stores will talk through it. No > idea if anyone has tried it. > > Warning: Do not attempt to use wildfly-1.0.4-Final with openssl 1.1; you > need to upgrade to 1.0.7 unless y

Re: Hadoop & TLS 1.3

2020-03-05 Thread Steve Loughran
On Thu, 5 Mar 2020 at 02:27, Wei-Chiu Chuang wrote: > Hi > > I am not familiar with the SSL connection in the cloud connectors so not > sure if this applies to them (or if cloud storage providers support TLS 1.3 > at all) > > abfs and s3a can now go via wildfly to use any native openssl 1.1 libra

Hadoop & TLS 1.3

2020-03-04 Thread Wei-Chiu Chuang
Hi We recently updated Jetty to 9.4.20 (HADOOP-16152 ). According to the Jetty release note https://www.eclipse.org/lists/jetty-announce/msg00124.html Jetty 9.4.12 and above, (I believe JDK 11.0.3 or above is required: https://webtide.com/openjdk