[HADOOP-16549] Remove Unsupported SSL/TLS Versions from Docs/Properties

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0
• Component/s: documentation, security
• Assignee: Daisuke Kobayashi
• Reporter: Daisuke Kobayashi
• Created: 05/Sep/19 08:06
• Updated: 24/May/22 20:13
• Resolved: 10/Sep/19 02:54

Description

We should remove the following unsupported versions from docs and core-default.xml appropriately.

TLS v1.0
TLS v1.1
SSL v3
SSLv2Hello

ref:
https://www.eclipse.org/jetty/documentation/9.3.27.v20190418/configuring-ssl.html
https://github.com/eclipse/jetty.project/issues/866

aajisaka, I happened to find you left TLSv1.1 in https://issues.apache.org/jira/browse/HADOOP-16000. Should we still keep it?

Issue Links

• duplicates: HADOOP-18140 Update default value of hadoop.ssl.enabled.protocols in the EncryptedShuffle doc
• relates to: HADOOP-16000 Remove TLSv1 and SSLv2Hello from the default value of hadoop.ssl.enabled.protocols