[HDFS-6605] Client server negotiation of cipher suite

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Fix Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Component/s: security
• Target Version/s: fs-encryption (HADOOP-10150 and HDFS-6134)
• Assignee: Andrew Wang
• Reporter: Andrew Wang
• Created: 27/Jun/14 20:53
• Updated: 03/Jul/14 05:38
• Resolved: 02/Jul/14 23:08

Description

For compatibility purposes, the client and server should negotiate what cipher suite to use based on their respective capabilities. This is also a way for the server to reject old clients that do not support encryption.