cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Stefan Podkowinski (JIRA)" <>
Subject [jira] [Commented] (CASSANDRA-11164) Order and filter cipher suites correctly
Date Tue, 23 Feb 2016 16:27:18 GMT


Stefan Podkowinski commented on CASSANDRA-11164:

Scope of this ticket as reported would be:
- respect ordering of enabled ciphers
- apply cipher filtering wherever SSL is used

I've now created two patches for that:
- {{11164-2.2_1_preserve_cipher_order.patch}} - cherry picked {{filterCipherSuites}} implementation
and unit test from CASSANDRA-10508 with some of your suggested changes
- {{11164-2.2_2_call_filterCipherSuites_everywhere.patch}} - this is {{11164-2.2.txt}} from
Tom minus the {{filterCipherSuites}} implementation


> Order and filter cipher suites correctly
> ----------------------------------------
>                 Key: CASSANDRA-11164
>                 URL:
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Tom Petracca
>            Assignee: Stefan Podkowinski
>            Priority: Minor
>             Fix For: 2.2.x
>         Attachments: 11164-2.2.txt, 11164-on-10508-2.2.patch
> As pointed out in, SSLFactory.filterCipherSuites()
doesn't respect the ordering of desired ciphers in cassandra.yaml.
> Also the fix that occurred for is
incomplete and needs to be applied to all locations where we create an SSLSocket so that JCE
is not required out of the box or with additional configuration.

This message was sent by Atlassian JIRA

View raw message