2.16 - Enforce the configured TLS version

[cescoffier]

Fix https://access.redhat.com/security/cve/cve-2023-2974

The embargo has been lifted.

[gsmet]

@cescoffier apparently, you can't use a Set in config:

2023-07-03T09:09:55.7396719Z Caused by: java.lang.RuntimeException: java.lang.RuntimeException: java.lang.IllegalArgumentException: SRCFG00013: No Converter registered for interface java.util.Set
2023-07-03T09:09:55.7397457Z 	at io.quarkus.runtime.configuration.ConfigInstantiator.handleObject(ConfigInstantiator.java:135)
2023-07-03T09:09:55.7398152Z 	at io.quarkus.runtime.configuration.ConfigInstantiator.handleObject(ConfigInstantiator.java:74)
2023-07-03T09:09:55.7399112Z 	at io.quarkus.vertx.http.devconsole.BodyHandlerBean.setup(BodyHandlerBean.java:20)
2023-07-03T09:09:55.7399703Z 	at io.quarkus.vertx.http.devconsole.BodyHandlerBean_Observer_setup_baa07743e34332319d9a52e7925a9fa5cd82e521.notify(Unknown Source)
2023-07-03T09:09:55.7400522Z 	at io.quarkus.arc.impl.EventImpl$Notifier.notifyObservers(EventImpl.java:328)
2023-07-03T09:09:55.7401191Z 	at io.quarkus.arc.impl.EventImpl$Notifier.notify(EventImpl.java:310)
2023-07-03T09:09:55.7401707Z 	at io.quarkus.arc.impl.EventImpl.fire(EventImpl.java:78)
2023-07-03T09:09:55.7402262Z 	at io.quarkus.vertx.http.runtime.VertxHttpRecorder.finalizeRouter(VertxHttpRecorder.java:363)
2023-07-03T09:09:55.7402911Z 	at io.quarkus.deployment.steps.VertxHttpProcessor$finalizeRouter1136011590.deploy_0(Unknown Source)
2023-07-03T09:09:55.7403521Z 	at io.quarkus.deployment.steps.VertxHttpProcessor$finalizeRouter1136011590.deploy(Unknown Source)
2023-07-03T09:09:55.7403914Z 	... 13 more
2023-07-03T09:09:55.7404537Z Caused by: java.lang.RuntimeException: java.lang.IllegalArgumentException: SRCFG00013: No Converter registered for interface java.util.Set
2023-07-03T09:09:55.7405447Z 	at io.quarkus.runtime.configuration.ConfigInstantiator.handleObject(ConfigInstantiator.java:135)
2023-07-03T09:09:55.7406144Z 	at io.quarkus.runtime.configuration.ConfigInstantiator.handleObject(ConfigInstantiator.java:106)
2023-07-03T09:09:55.7406582Z 	... 22 more
2023-07-03T09:09:55.7407087Z Caused by: java.lang.IllegalArgumentException: SRCFG00013: No Converter registered for interface java.util.Set
2023-07-03T09:09:55.7407662Z 	at io.smallrye.config.SmallRyeConfig.requireConverter(SmallRyeConfig.java:484)
2023-07-03T09:09:55.7408295Z 	at io.quarkus.runtime.configuration.ConfigInstantiator.getConverterFor(ConfigInstantiator.java:195)
2023-07-03T09:09:55.7409006Z 	at io.quarkus.runtime.configuration.ConfigInstantiator.handleObject(ConfigInstantiator.java:120)

[cescoffier]

Weird as the patch got applied downstream... let me check what's going on.

[cescoffier]

Ok... works locally... this is going to be fun.

[cescoffier]

Switched back to list - let's see.

[cescoffier]

Damned ---- just saw it's for 2.16.

[quarkus-bot]

Failing Jobs - Building d5fc954

Status	Name	Step	Failures	Logs	Raw logs
✔️	JVM Tests - JDK 11
⌛	JVM Tests - JDK 11 Windows	Build	⚠️ Check →	Logs	Raw logs
✔️	JVM Tests - JDK 17
✔️	JVM Tests - JDK 18
✔️	Maven Tests - JDK 11
⌛	Maven Tests - JDK 11 Windows	Build	⚠️ Check →	Logs	Raw logs
⌛	Native Tests - Data6	Build	⚠️ Check →	Logs	Raw logs
✖	Native Tests - Windows - RESTEasy Jackson	Build	Failures	Logs	Raw logs

Failures

⚙️ Native Tests - Windows - RESTEasy Jackson #

- Failing: integration-tests/resteasy-jackson 

📦 integration-tests/resteasy-jackson

✖ Failed to execute goal io.quarkus:quarkus-maven-plugin:2.16.999-SNAPSHOT:build (default) on project quarkus-integration-test-resteasy-jackson: Failed to build quarkus application