[HADOOP-16661] Support TLS 1.3

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Component/s: security
• Target Version/s: 3.3.0

Release Note

Starting with Hadoop 3.3.0, TLS 1.3 is supported on Java 11 Runtime (11.0.3 and above).
This support does not include cloud connectors.

To enable TLSv1.3, add to the core-site.xml:
<property>
  <name>hadoop.ssl.enabled.protocols</name>
  <value>TLSv1.3</value>
</property>

• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 18/Oct/19 13:42
• Updated: 16/Mar/20 18:22
• Resolved: 16/Mar/20 17:58

Description

HADOOP-16152 is going to update Jetty from 9.3 to 9.4.20, which should allow us to support TLS 1.3 https://www.eclipse.org/lists/jetty-users/msg08569.html

We should test and document the support of TLS 1.3. Assuming its support depends on JDK, then it is likely only supported in JDK11 and above.

Issue Links

• Dependent: HADOOP-15338 Java 11 runtime support
• Dependent: HADOOP-16152 Upgrade Eclipse Jetty version to 9.4.x
• links to: GitHub Pull Request #1880