Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-11164

Order and filter cipher suites correctly

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Low
    • Resolution: Fixed
    • 2.2.6, 3.0.4, 3.4
    • None
    • None
    • Low

    Description

      As pointed out in https://issues.apache.org/jira/browse/CASSANDRA-10508, SSLFactory.filterCipherSuites() doesn't respect the ordering of desired ciphers in cassandra.yaml.

      Also the fix that occurred for https://issues.apache.org/jira/browse/CASSANDRA-3278 is incomplete and needs to be applied to all locations where we create an SSLSocket so that JCE is not required out of the box or with additional configuration.

      Attachments

        1. 11164-2.2.txt
          8 kB
          Tom Petracca
        2. 11164-2.2_spod.patch
          16 kB
          Stefan Podkowinski

        Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. CASSANDRA-10508 Remove hard-coded SSL cipher suites and protocols

          • Normal -
          • Resolved

          Activity

            People

              spod Stefan Podkowinski
              tpetracca Tom Petracca
              Stefan Podkowinski
              Stefania Alborghetti
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: