HTTP Decommission: 24 Hour HTTP Disable

Scheduled Maintenance Report for Gradle

Postmortem

During the course of this 24 hour trial period we ended up blocking just under 513k HTTP requests against our various gradle.org domains which is ~1.2% of our traffic. During this time we did see a decrease in the number of requests using HTTP instead HTTPS.

Gradle has also officially dropped support for TLSv1.0 across all of our domains. TLSv1.3 was enabled yesterday but due to a race condition bug the TLSv1.3 logic in early versions of JDK 11 and JDK 12 we have decided to turn off TLSv1.3 support for the time being.

https://bugs.openjdk.java.net/browse/JDK-8213202

Overall, we believe this test was a success and plan on moving forward with the planned decommission of HTTP on January 15th, 2020.

Posted Nov 15, 2019 - 20:46 UTC

Completed

The scheduled maintenance has been completed.

Posted Nov 15, 2019 - 15:00 UTC

Update

Some people are reporting issues pulling artifacts from plugins.gradle.org over HTTPS.

We recently added support for TLSv3. If you are seeing errors like `peer not authenticated` or `javax.net.ssl.SSLException: No PSK available. Unable to resume.` please update your JDK version.

Both JDK 11 and JDK 12 have patches out for this issue.

https://bugs.openjdk.java.net/browse/JDK-8213202

Posted Nov 14, 2019 - 19:16 UTC

Update

We have permanently disabled support for TLSv1.0

Posted Nov 14, 2019 - 16:14 UTC

Update

Beginning the temporary decommission

Posted Nov 14, 2019 - 15:39 UTC

In progress

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Posted Nov 14, 2019 - 15:00 UTC

Scheduled

Gradle is Decommissioning the use of HTTP to access Gradle Services in favor of HTTPS only.
On November 14th, 2019, Gradle will drop HTTP support for 24 hours.

More information can be found here: https://blog.gradle.org/decommissioning-http

Posted Oct 21, 2019 - 16:39 UTC

This scheduled maintenance affected: Gradle Build Tool (gradle.org) (Downloads (services.gradle.org)) and Gradle Plugin portal (plugins.gradle.org) (Repository).