Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop support for Java 7 #3426

Closed
andreamlin opened this issue Jul 3, 2018 · 5 comments
Closed

Drop support for Java 7 #3426

andreamlin opened this issue Jul 3, 2018 · 5 comments
Assignees
Labels
priority: p2 Moderately-important priority. Fix may not be included in next release. type: process A process-related concern. May include testing, release, or the like.

Comments

@andreamlin
Copy link
Contributor

andreamlin commented Jul 3, 2018

Clients won't be able to fetch dependencies from Maven due to Java 7 not supporting TLS 1.2 by default
Sample failed CI build, note the "Received fatal alert: protocol_version" message:

[ERROR] Failed to execute goal on project proto-google-cloud-bigquerydatatransfer-v1:
 Could not resolve dependencies for project com.google.api.grpc:proto-google-cloud-bigquerydatatransfer-v1:jar:0.18.1-SNAPSHOT:
 Failed to collect dependencies at com.google.api.grpc:proto-google-common-protos:jar:1.12.0:
 Failed to read artifact descriptor for com.google.api.grpc:proto-google-common-protos:jar:1.12.0:
 Could not transfer artifact com.google.api.grpc:proto-google-common-protos:pom:1.12.0 from/to central (https://repo.maven.apache.org/maven2):
 Received fatal alert: protocol_version -> [Help 1]

This will continue to break any CI builds that use Java 7, e.g. in google-cloud-java.

This can be mitigated by #3427, which will solve the dependency fetch issue, but still leaves open concerns that we are supported an outdated, potentially insecure version of Java.

Java 7 doesn't have public security updates any more, and it has been deprecated by Oracle.

@garrettjonesgoogle
Copy link
Member

@andreamlin
Copy link
Contributor Author

I've spent a couple days trying to apply fixes to enable TLS 1.2 on Java 7 without any luck, but if someone else can do it that would be great!

@andreamlin
Copy link
Contributor Author

Also even if we enable TLS 1.2 on Java 7, users would have to do the same thing.

@JustinBeckwith JustinBeckwith added triage me I really want to be triaged. 🚨 This issue needs some love. labels Jul 4, 2018
@andreamlin andreamlin added type: process A process-related concern. May include testing, release, or the like. priority: p2 Moderately-important priority. Fix may not be included in next release. and removed 🚨 This issue needs some love. triage me I really want to be triaged. labels Jul 9, 2018
@andreamlin
Copy link
Contributor Author

We should get sign-off from the DPE, LOL, and Java gRPC teams.

@andreamlin
Copy link
Contributor Author

Apiary libraries have yet to turn down Java 5 support, so this issue won't be resolved for a long time. Closing for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
priority: p2 Moderately-important priority. Fix may not be included in next release. type: process A process-related concern. May include testing, release, or the like.
Projects
None yet
Development

No branches or pull requests

3 participants