You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Henry Robinson (JIRA)" <ji...@apache.org> on 2017/08/15 18:06:00 UTC

[jira] [Resolved] (IMPALA-5743) Allow for configuration of TLS / SSL versions

     [ https://issues.apache.org/jira/browse/IMPALA-5743?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Henry Robinson resolved IMPALA-5743.
------------------------------------
       Resolution: Fixed
    Fix Version/s: Impala 2.10.0

Fixed in https://github.com/apache/incubator-impala/commit/16ce201f5250451cb55e2cb9821b5d628d777160.

Note that this requires [this toolchain commit|https://github.com/cloudera/native-toolchain/commit/fc9954b4fab21d31d5c4b99b1f64545d2c70f65b] to add TLS configuration to Thrift 0.9.0.

> Allow for configuration of TLS / SSL versions
> ---------------------------------------------
>
>                 Key: IMPALA-5743
>                 URL: https://issues.apache.org/jira/browse/IMPALA-5743
>             Project: IMPALA
>          Issue Type: Improvement
>          Components: Security
>    Affects Versions: Impala 2.7.0, Impala 2.8.0, Impala 2.9.0, Impala 2.10.0
>            Reporter: Henry Robinson
>            Assignee: Henry Robinson
>             Fix For: Impala 2.10.0
>
>
> It would be good for users to be able, via the command line, to specify acceptable TLS protocols.
> Users will typically want to specify a minimum protocol version (i.e. TLS1.0, 1.1 or 1.2), rather than a specific protocol version. Kudu has {{--rpc_tls_minimum_version}}, and we can follow their lead. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)