Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-11164

Order and filter cipher suites correctly

Log workAgile BoardRank to TopRank to BottomAttach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Low
    • Resolution: Fixed
    • Fix Version/s: 2.2.6, 3.0.4, 3.4
    • Component/s: None
    • Labels:
      None
    • Severity:
      Low

      Description

      As pointed out in https://issues.apache.org/jira/browse/CASSANDRA-10508, SSLFactory.filterCipherSuites() doesn't respect the ordering of desired ciphers in cassandra.yaml.

      Also the fix that occurred for https://issues.apache.org/jira/browse/CASSANDRA-3278 is incomplete and needs to be applied to all locations where we create an SSLSocket so that JCE is not required out of the box or with additional configuration.

        Attachments

        Issue Links

          Activity

          $i18n.getText('security.level.explanation', $currentSelection) Viewable by All Users
          Cancel

            People

            • Assignee:
              spod Stefan Podkowinski Assign to me
              Reporter:
              tpetracca Tom Petracca
              Authors:
              Stefan Podkowinski
              Reviewers:
              Stefania Alborghetti

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment