impala-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Henry Robinson (Code Review)" <ger...@cloudera.org>
Subject [native-toolchain-CR] IMPALA-5743: Allow TLS version configuration
Date Tue, 01 Aug 2017 22:30:15 GMT
Henry Robinson has uploaded a new change for review.

  http://gerrit.cloudera.org:8080/7558

Change subject: IMPALA-5743: Allow TLS version configuration
......................................................................

IMPALA-5743: Allow TLS version configuration

* Backport THRIFT-2258 to allow for configuration of supported TLS
  versions.
* Rework patch so that either one specific version may be selected, or
  all versions including and following a specific version. So TLSv1_1
  only allows TLS 1.1 connections, but TLSv1_1_plus allows TLS 1.1 and
  TLS 1.2 connections. This makes testing easier.
* SSLv2 and v3 are explicitly disabled, always, as per previous
  patch. They are insecure and superseded by TLS.
* Disable building Thrift's tutorial to slightly improve build times.

Thrift patch is available at:

https://github.com/henryr/thrift/commit/32293b8314e57f181e9e5c08bc8812a3cfdb7ecf

Change-Id: Ida75e74682606eefcc59a17cb2dd2b4e71862e9c
---
M buildall.sh
M source/thrift/build.sh
A source/thrift/thrift-0.9.0-patches/0010-THRIFT-2258-Add-TLS-configuration.patch
3 files changed, 126 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.cloudera.org:29418/native-toolchain refs/changes/58/7558/1
-- 
To view, visit http://gerrit.cloudera.org:8080/7558
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ida75e74682606eefcc59a17cb2dd2b4e71862e9c
Gerrit-PatchSet: 1
Gerrit-Project: native-toolchain
Gerrit-Branch: master
Gerrit-Owner: Henry Robinson <henry@cloudera.com>

Mime
View raw message