István Fajth created HDDS-15094:
-----------------------------------
Summary: Add protocol and cipher config for gRPC TLS config
Key: HDDS-15094
URL: https://issues.apache.org/jira/browse/HDDS-15094
Project: Apache Ozone
Issue Type: Sub-task
Components: Security
Reporter: István Fajth
Assignee: István Fajth
In order to control the TLS protocol version, and the enabled TLS ciphers for
gRPC based server sockets, we need to add {{hdds.grpc.tls.protocols}} and
{{hdds.grpc.tls.ciphers}} as a configuration. Based on these configuration, we
can set up the 4 gRPC server endpoints (GrpcOzoneManagerServer,
XceiverServerGrpc, ReplicationServer, InterSCMGrpcProtocolService) to use just
the enabled protocols and ciphers.
The default should be empty, based on that the SSLContext used for these
servers should not set the protocols and ciphers leaving it as the platform
defaults.
The client side setup of these server side sockets does not need to be
restricted as the server side will enforce these settings.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
