Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-11164

Order and filter cipher suites correctly

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Low
    • Resolution: Fixed
    • Fix Version/s: 2.2.6, 3.0.4, 3.4
    • Component/s: None
    • Labels:
      None
    • Severity:
      Low

      Description

      As pointed out in https://issues.apache.org/jira/browse/CASSANDRA-10508, SSLFactory.filterCipherSuites() doesn't respect the ordering of desired ciphers in cassandra.yaml.

      Also the fix that occurred for https://issues.apache.org/jira/browse/CASSANDRA-3278 is incomplete and needs to be applied to all locations where we create an SSLSocket so that JCE is not required out of the box or with additional configuration.

        Attachments

        1. 11164-2.2.txt
          8 kB
          Tom Petracca
        2. 11164-2.2_spod.patch
          16 kB
          Stefan Podkowinski

          Issue Links

            Activity

              People

              • Assignee:
                spodxx@gmail.com Stefan Podkowinski
                Reporter:
                tpetracca Tom Petracca
                Authors:
                Stefan Podkowinski
                Reviewers:
                Stefania
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: