[IMPALA-11195] Disable SSL session renegotiation

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Impala 4.3.0
• Component/s: Backend
• Epic Color: ghx-label-8
• Assignee: Zoltán Borók-Nagy
• Reporter: Zoltán Borók-Nagy
• Created: 21/Mar/22 10:09
• Updated: 17/Aug/23 08:45
• Resolved: 17/Aug/23 08:45

Description

SSL renegotiations has had a couple of CVEs in the past. We should figure out how to disable it.

Kudu disabled SSL renegotations in KUDU-1926, so we can do something similar.