Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-5839 Flink Security problem collection
  3. FLINK-5981

SSL version and ciper suites cannot be constrained as configured

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.3.0
    • Runtime / Coordination
    • None

    Description

      I configured ssl and start flink job, but found configured properties cannot apply properly:
      akka port: only ciper suites apply right, ssl version not
      blob server/netty server: both ssl version and ciper suites are not like what I configured

      I've found out the reason why:
      http://stackoverflow.com/questions/11504173/sslcontext-initialization (for blob server and netty server)
      https://groups.google.com/forum/#!topic/akka-user/JH6bGnWE8kY(for akka ssl version, it's fixed in akka 2.4:https://github.com/akka/akka/pull/21078)

      I'll fix the issue on blob server and netty server, and it seems like only upgrade for akka can solve issue in akka side(we'll consider later as upgrade is not a small action).

      Attachments

        Issue Links

          Activity

            People

              WangTao Tao Wang
              WangTao Tao Wang
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: