Sailesh Mukil has uploaded this change for review. ( http://gerrit.cloudera.org:8080/9060
Change subject: IMPALA-6418: Find a reliable way to detect supported TLS versions ...................................................................... IMPALA-6418: Find a reliable way to detect supported TLS versions Due to a RHEL bug, finding the version of the dynamically linked OpenSSL is unreliable on certain RHEL platforms. This means that if Impala is built against OpenSSL 1.0.0 and run against OpenSSL 1.0.1, due to the bug, Impala will not be able to access the capabilities of OpenSSL 1.0.1. The most significant drawback of this is that in this scenario, Impala cannot use TLSv1.2, even though it is available. The RHEL bug: https://bugzilla.redhat.com/show_bug.cgi?id=1497859 This patch imitates Kudu's way of determining what TLS versions are supported via this patch: https://github.com/apache/kudu/commit/b88117415a02699c12a6eacbf065c4140ee0963c This is tested and works on all supported platforms of Impala. Change-Id: Idd40219b7be5889b3c24457acdb79a28bdcd9bfb --- M be/src/rpc/thrift-client.cc M be/src/rpc/thrift-server.cc M be/src/util/openssl-util.cc M be/src/util/openssl-util.h 4 files changed, 36 insertions(+), 9 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/60/9060/1 -- To view, visit http://gerrit.cloudera.org:8080/9060 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: Idd40219b7be5889b3c24457acdb79a28bdcd9bfb Gerrit-Change-Number: 9060 Gerrit-PatchSet: 1 Gerrit-Owner: Sailesh Mukil <sail...@cloudera.com>