[HADOOP-11260] Patch up Jetty to disable SSLv3

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.5.1
• Fix Version/s: 2.5.2, 2.6.0
• Component/s: security
• Target Version/s: 2.6.0
• Hadoop Flags: Reviewed
• Assignee: Mike Yoder
• Reporter: Karthik Kambatla
• Created: 02/Nov/14 19:27
• Updated: 13/Nov/14 20:57
• Resolved: 05/Nov/14 00:28

Description

Hadoop uses an older version of Jetty that allows SSLv3. We should fix it up.

Issue Links

• is related to: HIVE-8827 Remove SSLv2Hello from list of disabled protocols