[CASSANDRA-6613] Java 7u51 breaks internode encryption

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 1.2.16, 2.0.7, 2.1 beta2
• Severity: Normal
• Since Version: 1.2.12
• Assignee: Brandon Williams
• Reporter: Ray Sinnema

Authors

Brandon Williams

Reviewers

Ray Sinnema

• Created: 24/Jan/14 08:31
• Updated: 16/Apr/19 09:31
• Resolved: 17/Mar/14 17:12

Description

With the latest update of the Oracle JRE (7u51) internode encryption no longer works, since none of the cipher suites (TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA) that Cassandra supports work anymore.

I see this in the log file:
WARN o.a.cassandra.security.SSLFactory - Filtering out TLS_RSA_WITH_AES_256_CBC_SHA as it isnt supported by the socket

See http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html (all the way at the bottom) for more information.