Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-5839 Flink Security problem collection
  3. FLINK-5981

SSL version and ciper suites cannot be constrained as configured

    Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.3.0
    • Component/s: Security
    • Labels:
      None

      Description

      I configured ssl and start flink job, but found configured properties cannot apply properly:
      akka port: only ciper suites apply right, ssl version not
      blob server/netty server: both ssl version and ciper suites are not like what I configured

      I've found out the reason why:
      http://stackoverflow.com/questions/11504173/sslcontext-initialization (for blob server and netty server)
      https://groups.google.com/forum/#!topic/akka-user/JH6bGnWE8kY(for akka ssl version, it's fixed in akka 2.4:https://github.com/akka/akka/pull/21078)

      I'll fix the issue on blob server and netty server, and it seems like only upgrade for akka can solve issue in akka side(we'll consider later as upgrade is not a small action).

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                WangTao Tao Wang
                Reporter:
                WangTao Tao Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: