You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2026/06/10 14:25:00 UTC

[jira] [Updated] (ZOOKEEPER-5054) Netty client should allow every supported TLS ciphers

     [ https://issues.apache.org/jira/browse/ZOOKEEPER-5054?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated ZOOKEEPER-5054:
--------------------------------------
    Labels: pull-request-available  (was: )

> Netty client should allow every supported TLS ciphers
> -----------------------------------------------------
>
>                 Key: ZOOKEEPER-5054
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5054
>             Project: ZooKeeper
>          Issue Type: Improvement
>    Affects Versions: 3.9.5
>            Reporter: Balazs Meszaros
>            Assignee: Balazs Meszaros
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Similarly to HBASE-30212, we get a {{javax.net.ssl.SSLHandshakeException: no cipher suites in common}} exception in ZooKeeper if we set {{zookeeper.ssl.ciphersuites=TLS_CHACHA20_POLY1305_SHA256}} only at the server side. This cipher is a *mandatory* cipher suite for TLSv1.3.
> We should be less restrictive at the client side.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)