You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2018/02/12 20:51:47 UTC

[GitHub] jai1 opened a new pull request #1225: Enable specification of TLS Protocol Versions and Cipher Suites

jai1 opened a new pull request #1225: Enable specification of TLS Protocol Versions and Cipher Suites
URL: https://github.com/apache/incubator-pulsar/pull/1225
 
 
   ### Motivation
   
   Enable listening services (Broker, Proxy, Discovery Provider) to specify which TLS Protocol Versions and Cipher Suites they will negotiate with.
   This is useful when you don't want the client to use downgraded protocols or ciphers which are weak.
   
   ### Modifications
   Major code change is in SecurityUtility.createNettySslContextForServer rest is just config changes and tests.
   
   ### Result
   Clients can't force servers (Broker, Proxy, Discovery Provider)  to use downgraded protocols or ciphers which are weak.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services