[jira] [Commented] (CAMEL-9020) Splunk component should use TLS instead of SSLv3

["Preben Asmussen (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CAMEL-9020?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14642073#comment-14642073 ] 

Preben Asmussen commented on CAMEL-9020:
----------------------------------------

The splunk sdk supports an easy way of configuring TLS on the Service class.
You can statically set the desired TLS version as an enum with values of SSLv3, TLSv1, TLSv1_1 or TLSv1_2 

I was thinking just to set the version to TLSv1_2 since it seems recommended for both jdk7 and jdk8
An other option could be to make it configurable so users can choose between TLS versions if it makes sense to do so.

Any comments ?



> Splunk component should use TLS instead of SSLv3
> ------------------------------------------------
>
>                 Key: CAMEL-9020
>                 URL: https://issues.apache.org/jira/browse/CAMEL-9020
>             Project: Camel
>          Issue Type: Improvement
>    Affects Versions: 2.15.2
>         Environment: jdk 8
>            Reporter: Preben Asmussen
>            Priority: Minor
>
> SSLv3 support has been removed in jdk 8.
> The component should be upgraded to Splunk sdk 1.4.0, and use TLS instead. See https://github.com/splunk/splunk-sdk-java#java-and-ant.
> A bundle is ready at http://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.splunk/1.4.0.0_1



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)