[CASSANDRA-18575] Backport Cassandra-10508 Remove hard-coded SSL cipher suites and protocols

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.0.30
• Component/s: Messaging/Internode
• Bug Category: Security
• Severity: Normal
• Complexity: Normal
• Discovered By: User Report
• Platform: All
• Since Version: NA

Source Control Link

https://github.com/apache/cassandra/commit/e67fa69114ca8ebd79e31eaced7d91913f91a0c2

Test and Documentation Plan

run CI

• Assignee: German Eichberger
• Reporter: German Eichberger

Authors

German Eichberger

Reviewers

Berenguer Blasi, Brandon Williams

• Created: 07/Jun/23 22:13
• Updated: 21/Jun/23 11:28
• Resolved: 21/Jun/23 11:28

Description

Cassandra 3.0 has ciphers hard coded and thus not allow more recent and secure ciphers for storage connections complicating migrations to later versions.

Issue Links

• links to: Github PR