[ZOOKEEPER-3930] Security issues: config zookeeper.ssl.ciphersuites do not effect for zookeeper client

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.5.7, 3.5.8
• Component/s: java client
• Assignee: Unassigned
• Reporter: xiaotong.wang
• Created: 08/Sep/20 11:57
• Updated: 08/Sep/20 13:15

Description

I have set  zookeeper.ssl.ciphersuites :TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 in ZKClientConfig ,but when i dump the tcp package , i find the ciphersuites do not match what i set 

i debug with the code of zookeeper 

maybe it need be add 

sslEngine.setEnabledCipherSuites(cipherSuites);   

after red tag 1,and cipherSuites can get from  clientConfig