Thomas Marshall has uploaded this change for review. ( http://gerrit.cloudera.org:8080/11376
Change subject: IMPALA-7519: Support elliptic curve ssl ciphers ...................................................................... IMPALA-7519: Support elliptic curve ssl ciphers Thrift's SSLSocketFactory class does not support setting ciphers that use ecdh. This patch modifies our existing subclass of SSLSocketFactory to override the ciphers() method and enable ECDH. The code for this was taken from be/src/kudu/security/tls_context.cc Testing: - Added a custom cluster test that verifies that a cluster with only ECDH ciphers enabled works. Change-Id: I1666ceabec51b425e8a82be1cf519e2ac35fa5a6 --- M be/src/rpc/thrift-server.cc M tests/custom_cluster/test_client_ssl.py 2 files changed, 52 insertions(+), 0 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/76/11376/1 -- To view, visit http://gerrit.cloudera.org:8080/11376 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I1666ceabec51b425e8a82be1cf519e2ac35fa5a6 Gerrit-Change-Number: 11376 Gerrit-PatchSet: 1 Gerrit-Owner: Thomas Marshall <thomasmarsh...@cmu.edu>
