[IMPALA-7519] Support elliptic curve ssl ciphers

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 3.1.0
• Fix Version/s: Impala 3.1.0
• Component/s: Backend, Clients
• Labels: security
• Epic Color: ghx-label-1
• Assignee: Thomas Tauber-Marshall
• Reporter: Thomas Tauber-Marshall
• Created: 31/Aug/18 22:40
• Updated: 24/Sep/18 20:56
• Resolved: 24/Sep/18 20:56

Description

Thrift's SSLSocketFactory class does not support setting ciphers that use ecdh. We already override this class for others reasons, it would be straightforward to add the necessary openssl calls to enable this.