You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@geode.apache.org by Nikhil Chandrappa <nc...@pivotal.io> on 2015/10/23 16:28:03 UTC

SSL/TSL versions supported by Geode

Hi,

I needed information on SSL versions supported by geode.

For the geode system property "server-ssl-protocols", the default value is
'any'. So what are the valid values for this property.

I checked in SSLConfigJunitTest.java, only values that are 'any' and
'SSLv7'. so I was wondering what version does 'SSLv7' use?

Thanks,
Nikhil

Re: SSL/TSL versions supported by Geode

Posted by Nikhil Chandrappa <nc...@pivotal.io>.

Thanks Jacob, that helps.

~ Nikhil

On Fri, Oct 23, 2015 at 11:35 AM, Jacob Barrett <jb...@pivotal.io> wrote:

> It roughly corresponds to the SSLEngine.setEnabledProtocols function.
>
> http://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLEngine.html#setEnabledProtocols-java.lang.String:A-
>
> It is dependent on the SSL provider you have. Assuming default Oracle/Sun
> provider for Java 8 these would be "TLSv1, TLSv1.1, TLSv1.2”.
>
>
> On Fri, Oct 23, 2015 at 7:28 AM, Nikhil Chandrappa <nchandrappa@pivotal.io
> > wrote:
>
>> Hi,
>>
>> I needed information on SSL versions supported by geode.
>>
>> For the geode system property "server-ssl-protocols", the default value
>> is 'any'. So what are the valid values for this property.
>>
>> I checked in SSLConfigJunitTest.java, only values that are 'any' and
>> 'SSLv7'. so I was wondering what version does 'SSLv7' use?
>>
>> Thanks,
>> Nikhil
>>
>>
>

Re: SSL/TSL versions supported by Geode

Posted by Jacob Barrett <jb...@pivotal.io>.

It roughly corresponds to the SSLEngine.setEnabledProtocols function.

http://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLEngine.html#setEnabledProtocols-java.lang.String:A-

It is dependent on the SSL provider you have. Assuming default Oracle/Sun provider for Java 8 these would be "TLSv1, TLSv1.1, TLSv1.2”.

On Fri, Oct 23, 2015 at 7:28 AM, Nikhil Chandrappa <nc...@pivotal.io>
wrote:

> Hi,
> I needed information on SSL versions supported by geode.
> For the geode system property "server-ssl-protocols", the default value is
> 'any'. So what are the valid values for this property.
> I checked in SSLConfigJunitTest.java, only values that are 'any' and
> 'SSLv7'. so I was wondering what version does 'SSLv7' use?
> Thanks,
> Nikhil