You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "Balazs Meszaros (Jira)" <ji...@apache.org> on 2026/06/10 14:17:00 UTC

[jira] [Created] (ZOOKEEPER-5054) Netty client should allow every supported TLS ciphers

Balazs Meszaros created ZOOKEEPER-5054:
------------------------------------------

             Summary: Netty client should allow every supported TLS ciphers
                 Key: ZOOKEEPER-5054
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5054
             Project: ZooKeeper
          Issue Type: Improvement
    Affects Versions: 3.9.5
            Reporter: Balazs Meszaros


Similarly to HBASE-30212, we get a {{javax.net.ssl.SSLHandshakeException: no cipher suites in common}} exception in ZooKeeper if we set {{zookeeper.ssl.ciphersuites=TLS_CHACHA20_POLY1305_SHA256}} only at the server side. This cipher is a *mandatory* cipher suite for TLSv1.3.

We should be less restrictive at the client side.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)