BK needs additional test (possibly, fixes) for TLS1.3 support
- Dominant language
- Java
- Stars
- 2k
- Forks
- 976
- Avg merge
- 6d 15h
- Merged PRs (30d)
- 7
Description
**BUG REPORT**
***Describe the bug***
TLSv1.3 has been enabled by default since Netty 4.1.52.Final (when the JDK contains TLSv1.3). TLSv1.3 support has been available in Java 8 since 8u262 .
The handshake protocol in TLSv1.3 is different than in TLSv1.2 as explained in https://stackoverflow.com/a/62465859 . This difference isn't handled in Bookkeeper production code and test code.
***Additional context***
https://github.com/apache/bookkeeper/pull/2696 and comments there
Contributor guide
Research direction
Start by reading the TLS 1.3 handshake explanation and the discussion in pull request #2696, then trace the BookKeeper production and test code involved in TLS handshakes. Done means TLS 1.3 behavior is covered by an additional test and any required fixes are verified by the relevant test suite.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- distributed-systems, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100