[KUDU-2871] TLS 1.3 not supported by krpc

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.8.0, 1.9.0, 1.9.1
• Fix Version/s: 1.15.0
• Component/s: master, rpc, security, tserver
• Code Review: http://gerrit.cloudera.org:8080/17189
• Assignee: Alexey Serbin
• Reporter: Todd Lipcon
• Created: 20/Jun/19 06:47
• Updated: 07/Apr/21 16:03
• Resolved: 07/Apr/21 16:03

Description

The TLS negotiation in our RPC protocol assumes a whole number of round trips between client and server. For TLS 1.3, the exchange has 1.5 round trips (the client is the last sender rather than the server) which breaks negotiation. Most tests thus fail with OpenSSL 1.1.1.

We should temporarily disable TLS 1.3 and then fix RPC to support this.

Issue Links

• is related to: KUDU-2427 Add support for Ubuntu 18.04