[IMPALA-5743] Allow for configuration of TLS / SSL versions

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 2.7.0, Impala 2.8.0, Impala 2.9.0, Impala 2.10.0
• Fix Version/s: Impala 2.10.0
• Component/s: Security
• Epic Color: ghx-label-8
• Assignee: Henry Robinson
• Reporter: Henry Robinson
• Created: 31/Jul/17 21:22
• Updated: 15/Aug/17 18:05
• Resolved: 15/Aug/17 18:05

Description

It would be good for users to be able, via the command line, to specify acceptable TLS protocols.

Users will typically want to specify a minimum protocol version (i.e. TLS1.0, 1.1 or 1.2), rather than a specific protocol version. Kudu has --rpc_tls_minimum_version, and we can follow their lead.