You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Jason Fehr (Jira)" <ji...@apache.org> on 2025/08/14 19:58:00 UTC
[jira] [Updated] (IMPALA-14312) ssl_minimum_version Validator Failing on Empty Value

     [ https://issues.apache.org/jira/browse/IMPALA-14312?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jason Fehr updated IMPALA-14312:
--------------------------------
    Description: 
The validator for ssl_minimum_version added [here|https://gerrit.cloudera.org/c/22924/99/be/src/service/impala-server.cc#260] has a couple issues.

1. The value can be empty as long as TLS is not configured.  The validator is failing whenever this value is empty no matter if TLS is enabled/disabled.
2. The value "tlsv1.0" is not valid based on [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/rpc/thrift-server.cc#L74-L77],  [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/kudu/security/tls_context.cc#L119-L122], and [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/util/webserver-test.cc#L403].
3. The value "tlsv1.3" is not supported by Thrift.

  was:
The validator for ssl_minimum_version added [here|https://gerrit.cloudera.org/c/22924/99/be/src/service/impala-server.cc#260] has a couple issues.

1. The value can be empty as long as TLS is not configured.  The validator is failing whenever this value is empty no matter if TLS is enabled/disabled.
2. The value "tlsv1.0" is not valid based on [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/rpc/thrift-server.cc#L74-L77],  [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/kudu/security/tls_context.cc#L119-L122], and [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/util/webserver-test.cc#L403].


> ssl_minimum_version Validator Failing on Empty Value
> ----------------------------------------------------
>
>                 Key: IMPALA-14312
>                 URL: https://issues.apache.org/jira/browse/IMPALA-14312
>             Project: IMPALA
>          Issue Type: Bug
>    Affects Versions: Impala 5.0.0
>            Reporter: Jason Fehr
>            Assignee: Jason Fehr
>            Priority: Critical
>             Fix For: Impala 5.0.0
>
>
> The validator for ssl_minimum_version added [here|https://gerrit.cloudera.org/c/22924/99/be/src/service/impala-server.cc#260] has a couple issues.
> 1. The value can be empty as long as TLS is not configured.  The validator is failing whenever this value is empty no matter if TLS is enabled/disabled.
> 2. The value "tlsv1.0" is not valid based on [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/rpc/thrift-server.cc#L74-L77],  [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/kudu/security/tls_context.cc#L119-L122], and [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/util/webserver-test.cc#L403].
> 3. The value "tlsv1.3" is not supported by Thrift.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org