HTTP Decommission: 24 Hour HTTP Disable
Scheduled Maintenance Report for Gradle
Postmortem

During the course of this 24 hour trial period we ended up blocking just under 513k HTTP requests against our various gradle.org domains which is ~1.2% of our traffic. During this time we did see a decrease in the number of requests using HTTP instead HTTPS.

Gradle has also officially dropped support for TLSv1.0 across all of our domains. TLSv1.3 was enabled yesterday but due to a race condition bug the TLSv1.3 logic in early versions of JDK 11 and JDK 12 we have decided to turn off TLSv1.3 support for the time being.

https://bugs.openjdk.java.net/browse/JDK-8213202

Overall, we believe this test was a success and plan on moving forward with the planned decommission of HTTP on January 15th, 2020.

Posted Nov 15, 2019 - 20:46 UTC

Completed
The scheduled maintenance has been completed.
Posted Nov 15, 2019 - 15:00 UTC
Update
Some people are reporting issues pulling artifacts from plugins.gradle.org over HTTPS.

We recently added support for TLSv3. If you are seeing errors like `peer not authenticated` or `javax.net.ssl.SSLException: No PSK available. Unable to resume.` please update your JDK version.

Both JDK 11 and JDK 12 have patches out for this issue.

https://bugs.openjdk.java.net/browse/JDK-8213202
Posted Nov 14, 2019 - 19:16 UTC
Update
We have permanently disabled support for TLSv1.0
Posted Nov 14, 2019 - 16:14 UTC
Update
Beginning the temporary decommission
Posted Nov 14, 2019 - 15:39 UTC
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Nov 14, 2019 - 15:00 UTC
Scheduled
Gradle is Decommissioning the use of HTTP to access Gradle Services in favor of HTTPS only.
On November 14th, 2019, Gradle will drop HTTP support for 24 hours.

More information can be found here: https://blog.gradle.org/decommissioning-http
Posted Oct 21, 2019 - 16:39 UTC
This scheduled maintenance affected: Plugin portal (plugins.gradle.org) (Repository) and Build Tool downloads (i.e. Gradle wrapper).