[
https://issues.apache.org/jira/browse/HADOOP-19879?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HADOOP-19879:
-------------------------------------
Description:
Now that Hadoop requires JDK17 and above (server side requires JDK17, client
side: JDK17 or JDK21), we can update the default TLS protocols to prefer
TLSv1.3 for enhanced security.
Specifically, update SSLFfactory.SSL_ENABLED_PROTOCOLS_DEFAULT =
"TLSv1.2,TLSv1.3"
and update relevant tests in TestSSLHttpServer.
was:Now that Hadoop requires JDK17 and above (server side requires JDK17,
client side: JDK17 or JDK21), we can update the default TLS protocols to prefer
TLSv1.3 for enhanced security.
> Add TLSv1.3 to the default protocols supported by HttpServer2
> -------------------------------------------------------------
>
> Key: HADOOP-19879
> URL: https://issues.apache.org/jira/browse/HADOOP-19879
> Project: Hadoop Common
> Issue Type: Task
> Affects Versions: 3.5.0
> Reporter: Wei-Chiu Chuang
> Priority: Major
>
> Now that Hadoop requires JDK17 and above (server side requires JDK17, client
> side: JDK17 or JDK21), we can update the default TLS protocols to prefer
> TLSv1.3 for enhanced security.
> Specifically, update SSLFfactory.SSL_ENABLED_PROTOCOLS_DEFAULT =
> "TLSv1.2,TLSv1.3"
> and update relevant tests in TestSSLHttpServer.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
