[IGNITE-18828] Add ciphers support to SSL (jdbc, client, scalecube)

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0-beta2
• Component/s: jdbc, networking, rest
• Labels: ignite-3
• Epic Link: Security
• Ignite Flags: Docs Required, Release Notes Required
• Assignee: Vadim Pakhnushev
• Reporter: Aleksandr
• Reviewer: Aleksandr
• Created: 16/Feb/23 15:15
• Updated: 16/Mar/23 07:32
• Resolved: 15/Mar/23 08:45

Description

It would be useful to have one more ssl-related configuration for cipher setup.
It should be added to:

• jdbc
• tcp client
• scalecube
• rest

This property should be tested. Also, bad certificates, wrong algorithms, client auth configuration mistakes, and all non-trivial cases should be covered in tests.

 

The node configuration path is network.ssl.ciphers, REST configuration path is rest.ssl.ciphers.

The value is a string of cipher suite names separated by comma.

Clients are configured with similar values with different types according to the client.

Issue Links

• is related to: IGNITE-19045 .NET: Thin 3.0: Make SSL ciphers configurable
• links to: GitHub Pull Request #1779