cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Stefan Podkowinski (JIRA)" <>
Subject [jira] [Commented] (CASSANDRA-11164) Order and filter cipher suites correctly
Date Thu, 25 Feb 2016 09:57:18 GMT


Stefan Podkowinski commented on CASSANDRA-11164:

{{SSLFactoryTest.testServerSocketCiphers()}} has been fixed and will now work with JVMs that
won't support all ciphers specified by config. Removed {{UnknownHostException}} and added
line to CHANGES.txt.


Patch merged upwards cleanly for me.

> Order and filter cipher suites correctly
> ----------------------------------------
>                 Key: CASSANDRA-11164
>                 URL:
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Tom Petracca
>            Assignee: Stefan Podkowinski
>            Priority: Minor
>             Fix For: 2.2.x
>         Attachments: 11164-2.2.txt, 11164-2.2_1_preserve_cipher_order.patch, 11164-2.2_2_call_filterCipherSuites_everywhere.patch
> As pointed out in, SSLFactory.filterCipherSuites()
doesn't respect the ordering of desired ciphers in cassandra.yaml.
> Also the fix that occurred for is
incomplete and needs to be applied to all locations where we create an SSLSocket so that JCE
is not required out of the box or with additional configuration.

This message was sent by Atlassian JIRA

View raw message