[
https://issues.apache.org/jira/browse/HDDS-15094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated HDDS-15094:
----------------------------------
Labels: pull-request-available (was: )
> Add protocol and cipher config to gRPC TLS config
> -------------------------------------------------
>
> Key: HDDS-15094
> URL: https://issues.apache.org/jira/browse/HDDS-15094
> Project: Apache Ozone
> Issue Type: Sub-task
> Components: Security
> Reporter: István Fajth
> Assignee: István Fajth
> Priority: Major
> Labels: pull-request-available
>
> In order to control the TLS protocol version, and the enabled TLS ciphers for
> gRPC based server sockets, we need to add {{hdds.grpc.tls.protocols}} and
> {{hdds.grpc.tls.ciphers}} as a configuration. Based on these configuration,
> we can set up the 4 gRPC server endpoints (GrpcOzoneManagerServer,
> XceiverServerGrpc, ReplicationServer, InterSCMGrpcProtocolService) to use
> just the enabled protocols and ciphers.
> The default should be empty, based on that the SSLContext used for these
> servers should not set the protocols and ciphers leaving it as the platform
> defaults.
> The client side setup of these server side sockets does not need to be
> restricted as the server side will enforce these settings.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
