[jira] [Commented] (HADOOP-12708) SSL based embeded jetty for hadoop services should allow configuration for elect cipher suites

["Shilun Fan (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-12708?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17802980#comment-17802980 ] 

Shilun Fan commented on HADOOP-12708:
-------------------------------------

Bulk update: moved all 3.4.0 non-blocker issues, please move back if it is a blocker. Retarget 3.5.0.

> SSL based embeded jetty for hadoop services should allow configuration for elect cipher suites
> ----------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-12708
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12708
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Vijay Singh
>            Priority: Major
>
> Currently all hadoop services use emebeded jetty server. Effort to exclude cipher suite is being tracked under Hadoop-12668. However, hadoop should allow to restrict the cipher suites using explicit list of cipher suites. Current, pom dependency does not allow interface to include select cipher suites. As a result, the options include following:
> 1) Upgrade jetty from 6.x to 8.x or 9.x
> 2) Contemplate and Implement WAR based implementation for these services
> 3) Include ability to select specific cipher suites



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org