[KUDU-1874] Require TLS 1.2

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.2.0
• Fix Version/s: 1.3.0
• Component/s: rpc, security
• Labels: security
• Assignee: Dan Burkert
• Reporter: Dan Burkert
• Created: 13/Feb/17 19:17
• Updated: 22/Feb/17 19:24
• Resolved: 22/Feb/17 19:24

Description

All supported platforms except for RHEL 6.4 and 6.5 support TLS 1.2. We should provide a flag on the server that disables TLS 1.0 and 1.1, and consider making it the default when running on non-legacy RHEL. TLS 1.2 provides better ciphers (GCM modes) and protection against certain attacks (BEAST) over TLS 1.0.