[DRILL-6610] Add support for Minimum TLS support

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.0
• Component/s: Client - C++
• Labels: doc-impacting ready-to-commit
• Assignee: Rob Wu
• Reporter: Rob Wu
• Reviewer: Sorabh Hamirwasia
• Created: 13/Jul/18 23:20
• Updated: 10/Nov/18 03:15
• Resolved: 10/Nov/18 03:15

Description

Add support for minimum TLS support.

Currently, the TLSProtocol parameter only supports a specific version of TLS to be used.

 

Investigation:

Setting the default SSL context method to be sslv23 with default sslv2 and sslv3 turned off would allow us to restrict the protocol to be TLS only.

Additional flags can be applied to further restrict the minimum TLS version:

For example:

Minimum TLS 1.0 - Sets NO_SSLv2 and NO_SSLv3

Minimum TLS 1.1 - Sets NO_SSLv2 and NO SSLv3 and NO_TLSv1

Minimum TLS 1.2 - Sets NO_SSLv2 and NO SSLv3 and NO_TLSv1 and NO_TLSv1_1

Issue Links

• links to: GitHub Pull Request #1388