hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Kanter (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-15832) Upgrade BouncyCastle
Date Tue, 09 Oct 2018 22:24:00 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-15832?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16644168#comment-16644168

Robert Kanter commented on HADOOP-15832:

I don't think that's related - its failing to compile ozone because it can't find an ozone
Failure to find org.apache.hadoop:hadoop-ozone-common:jar:0.3.0-SNAPSHOT in https://repository.apache.org/content/repositories/snapshots
was cached in the local repository, resolution will not be reattempted until the update interval
of apache.snapshots.https has elapsed or updates are forced{noformat}
All this patch does to ozone is update the bouncycastle dependency, and it works fine locally,
so I'm guessing the Jenkins build is caching something wrong maybe?

Any ideasĀ [~ajisakaa] or [~haibochen]? I'm inclined to say this isn't related, but I also
don't want to break the build if it's a real problem.

> Upgrade BouncyCastle
> --------------------
>                 Key: HADOOP-15832
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15832
>             Project: Hadoop Common
>          Issue Type: Improvement
>    Affects Versions: 3.3.0
>            Reporter: Robert Kanter
>            Assignee: Robert Kanter
>            Priority: Major
>         Attachments: HADOOP-15832.001.patch
> As part of my work on YARN-6586, I noticed that we're using a very old version of BouncyCastle:
> {code:xml}
> <dependency>
>    <groupId>org.bouncycastle</groupId>
>    <artifactId>bcprov-jdk16</artifactId>
>    <version>1.46</version>
>    <scope>test</scope>
> </dependency>
> {code}
> The *-jdk16 artifacts have been discontinued and are not recommended (see [http://bouncy-castle.1462172.n4.nabble.com/Bouncycaslte-bcprov-jdk15-vs-bcprov-jdk16-td4656252.html]).

>  In particular, the newest release, 1.46, is from {color:#FF0000}2011{color}! 
>  [https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk16]
> The currently maintained and recommended artifacts are *-jdk15on:
>  [https://www.bouncycastle.org/latest_releases.html]
>  They're currently on version 1.60, released only a few months ago.
> We should update BouncyCastle to the *-jdk15on artifacts and the 1.60 release. It's currently
a test-only artifact, so there should be no backwards-compatibility issues with updating this.
It's also needed for YARN-6586, where we'll actually be shipping it.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org

View raw message