[jira] [Created] (HDDS-15094) Add protocol and cipher config for gRPC TLS config

["István Fajth (Jira)" <ji...@apache.org>]

István Fajth created HDDS-15094:
-----------------------------------

             Summary: Add protocol and cipher config for gRPC TLS config
                 Key: HDDS-15094
                 URL: https://issues.apache.org/jira/browse/HDDS-15094
             Project: Apache Ozone
          Issue Type: Sub-task
          Components: Security
            Reporter: István Fajth
            Assignee: István Fajth


In order to control the TLS protocol version, and the enabled TLS ciphers for gRPC based server sockets, we need to add {{hdds.grpc.tls.protocols}} and {{hdds.grpc.tls.ciphers}} as a configuration. Based on these configuration, we can set up the 4 gRPC server endpoints (GrpcOzoneManagerServer, XceiverServerGrpc, ReplicationServer, InterSCMGrpcProtocolService) to use just the enabled protocols and ciphers.

The default should be empty, based on that the SSLContext used for these servers should not set the protocols and ciphers leaving it as the platform defaults.
The client side setup of these server side sockets does not need to be restricted as the server side will enforce these settings.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org