Skip to content

KAFKA-9771: Port patch for inter-worker Connect SSL from Jetty 9.4.25#8369

Merged
kkonstantine merged 2 commits intoapache:trunkfrom
C0urante:kafka-9771
Mar 27, 2020
Merged

KAFKA-9771: Port patch for inter-worker Connect SSL from Jetty 9.4.25#8369
kkonstantine merged 2 commits intoapache:trunkfrom
C0urante:kafka-9771

Conversation

@C0urante
Copy link
Copy Markdown
Contributor

@C0urante C0urante commented Mar 26, 2020

Jira

For reasons outlined in the ticket, we can't upgrade to a version of Jetty with the bug fixed, or downgrade to one prior to the introduction of the bug. Luckily, the actual fix is pretty straightforward and can be ported over to Connect for use until it's possible to upgrade to a version of Jetty with that bug fixed: https://github.com/eclipse/jetty.project/pull/4404/files#diff-58640db0f8f2cd84b7e653d1c1540913R2188-R2193

The changes here have been verified locally; currently investigating how they can best be tested via unit/integration/system tests.

Committer Checklist (excluded from commit message)

  • Verify design and implementation
  • Verify test coverage and CI build status
  • Verify documentation (including upgrade notes)

@kkonstantine
Copy link
Copy Markdown
Contributor

ok to test

Copy link
Copy Markdown
Contributor

@kkonstantine kkonstantine left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
Thanks for the fix @C0urante and the review @jeffhuang26 !

@kkonstantine kkonstantine merged commit ee832d7 into apache:trunk Mar 27, 2020
kkonstantine pushed a commit that referenced this pull request Mar 27, 2020
…#8369)

For reasons outlined in https://issues.apache.org/jira/browse/KAFKA-9771
we can't upgrade to a version of Jetty with the bug fixed, or downgrade to one prior to the introduction of the bug. Luckily, the actual fix is pretty straightforward and can be ported over to Connect for use until it's possible to upgrade to a version of Jetty with that bug fixed: https://github.com/eclipse/jetty.project/pull/4404/files#diff-58640db0f8f2cd84b7e653d1c1540913R2188-R2193

The changes here have been verified locally; a test with multiple certificates/multiple hostnames will be submitted in a follow up. 

Reviewers: Jeff Huang <47870461+jeffhuang26@users.noreply.github.com>, Konstantine Karantasis <konstantine@confluent.io>
@C0urante C0urante deleted the kafka-9771 branch March 27, 2020 17:40
@kkonstantine
Copy link
Copy Markdown
Contributor

kkonstantine commented Mar 27, 2020

Merged to trunk and 2.5

akatona84 added a commit to akatona84/kafka that referenced this pull request Jun 15, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants