[jira] [Resolved] (IMPALA-11195) Disable SSL session renegotiation

2023-08-17 Thread Jira


 [ 
https://issues.apache.org/jira/browse/IMPALA-11195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Zoltán Borók-Nagy resolved IMPALA-11195.

Resolution: Fixed

Thanks Michael for fixing the webserver ssl bugs.

> Disable SSL session renegotiation
> -
>
> Key: IMPALA-11195
> URL: https://issues.apache.org/jira/browse/IMPALA-11195
> Project: IMPALA
>  Issue Type: Bug
>  Components: Backend
>Reporter: Zoltán Borók-Nagy
>Assignee: Zoltán Borók-Nagy
>Priority: Major
> Fix For: Impala 4.3.0
>
>
> SSL renegotiations has had a couple of CVEs in the past. We should figure out 
> how to disable it.
> Kudu disabled SSL renegotations in KUDU-1926, so we can do something similar.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (IMPALA-11195) Disable SSL session renegotiation

2023-08-16 Thread Jira


 [ 
https://issues.apache.org/jira/browse/IMPALA-11195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Zoltán Borók-Nagy resolved IMPALA-11195.

Fix Version/s: Impala 4.3.0
   (was: Impala 4.1.0)
   Resolution: Fixed

> Disable SSL session renegotiation
> -
>
> Key: IMPALA-11195
> URL: https://issues.apache.org/jira/browse/IMPALA-11195
> Project: IMPALA
>  Issue Type: Bug
>  Components: Backend
>Reporter: Zoltán Borók-Nagy
>Assignee: Zoltán Borók-Nagy
>Priority: Major
> Fix For: Impala 4.3.0
>
>
> SSL renegotiations has had a couple of CVEs in the past. We should figure out 
> how to disable it.
> Kudu disabled SSL renegotations in KUDU-1926, so we can do something similar.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Resolved] (IMPALA-11195) Disable SSL session renegotiation

2022-03-28 Thread Jira


 [ 
https://issues.apache.org/jira/browse/IMPALA-11195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Zoltán Borók-Nagy resolved IMPALA-11195.

Fix Version/s: Impala 4.1.0
   Resolution: Fixed

> Disable SSL session renegotiation
> -
>
> Key: IMPALA-11195
> URL: https://issues.apache.org/jira/browse/IMPALA-11195
> Project: IMPALA
>  Issue Type: Bug
>  Components: Backend
>Reporter: Zoltán Borók-Nagy
>Assignee: Zoltán Borók-Nagy
>Priority: Major
> Fix For: Impala 4.1.0
>
>
> SSL renegotiations has had a couple of CVEs in the past. We should figure out 
> how to disable it.
> Kudu disabled SSL renegotations in KUDU-1926, so we can do something similar.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)