[jira] [Commented] (CASSANDRA-11164) Order and filter cipher suites correctly

["Stefan Podkowinski (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CASSANDRA-11164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15144334#comment-15144334 ] 

Stefan Podkowinski commented on CASSANDRA-11164:
------------------------------------------------

Do you have an opinion on not filtering the available cipher suites at all? Why fix the ordering when we can just get rid of the filtering in first place?

> Order and filter cipher suites correctly
> ----------------------------------------
>
>                 Key: CASSANDRA-11164
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-11164
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Tom Petracca
>            Priority: Minor
>             Fix For: 2.2.x
>
>         Attachments: 11164-2.2.txt
>
>
> As pointed out in https://issues.apache.org/jira/browse/CASSANDRA-10508, SSLFactory.filterCipherSuites() doesn't respect the ordering of desired ciphers in cassandra.yaml.
> Also the fix that occurred for https://issues.apache.org/jira/browse/CASSANDRA-3278 is incomplete and needs to be applied to all locations where we create an SSLSocket so that JCE is not required out of the box or with additional configuration.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)