[jira] [Commented] (DRILL-8177) Bump default TLS version to 1.3

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/DRILL-8177?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17512854#comment-17512854 ] 

ASF GitHub Bot commented on DRILL-8177:
---------------------------------------

luocooong commented on pull request #2505:
URL: https://github.com/apache/drill/pull/2505#issuecomment-1079879536


   @rymarm Thanks for the update. If we update the default SSL configuration, we also may have to update the default options and unit tests for the codebase.
   ```
   drill-module.conf - drill-java-exec/src/main/resources
   drill-override-example.conf - distribution/src/main/resources
   ExecConstants.java - drill-java-exec/src/main/java/org/apache/drill/exec
   SSLConfig.java - drill-java-exec/src/main/java/org/apache/drill/exec/ssl
   SslContextFactoryConfiguratorTest.java - drill-java-exec/src/test/java/org/apache/drill/exec/server/rest/ssl
   TestUserBitSSL.java - drill-java-exec/src/test/java/org/apache/drill/exec/rpc/user/security
   TestUserBitSSLServer.java - drill-java-exec/src/test/java/org/apache/drill/exec/rpc/user/security
   ```
   
   There are also associated documents [Configuring SSL/TLS for Encryption](https://github.com/apache/drill-site/blob/master/_docs/en/configure-drill/securing-drill/081-configuring-ssl-tls-for-encryption.md) to be update. Fork the `drill-site` and create new pull request for the markdown file.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Bump default TLS version to 1.3
> -------------------------------
>
>                 Key: DRILL-8177
>                 URL: https://issues.apache.org/jira/browse/DRILL-8177
>             Project: Apache Drill
>          Issue Type: Improvement
>          Components: Security, Web Server
>            Reporter: Maksym Rymar
>            Assignee: Maksym Rymar
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> Change default TLS version to 1.3 for Web Server and client-drillbit connection as it is more efficient ans secure protocol.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)