You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by ao...@apache.org on 2016/05/13 12:20:26 UTC
ambari git commit: AMBARI-16658. DevDeploy: Cannot connect to the
server using SSLv3 (aonishuk)
Repository: ambari
Updated Branches:
refs/heads/trunk 862d5b36d -> 94cd86df3
AMBARI-16658. DevDeploy: Cannot connect to the server using SSLv3 (aonishuk)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/94cd86df
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/94cd86df
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/94cd86df
Branch: refs/heads/trunk
Commit: 94cd86df3d76b7056ad512113bf6f53b7b2e862d
Parents: 862d5b3
Author: Andrew Onishuk <ao...@hortonworks.com>
Authored: Fri May 13 15:20:15 2016 +0300
Committer: Andrew Onishuk <ao...@hortonworks.com>
Committed: Fri May 13 15:20:15 2016 +0300
----------------------------------------------------------------------
.../java/org/apache/ambari/server/controller/AmbariServer.java | 4 ++++
1 file changed, 4 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/94cd86df/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java b/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
index a071c9b..db66961 100644
--- a/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
+++ b/ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
@@ -744,6 +744,10 @@ public class AmbariServer {
* at server properties)
*/
private void disableInsecureProtocols(SslContextFactory factory) {
+ // by default all protocols should be available
+ factory.setExcludeProtocols();
+ factory.setIncludeProtocols(new String[] { "SSLv2Hello","TLSv1"});
+
if (!configs.getSrvrDisabledCiphers().isEmpty()) {
String[] masks = configs.getSrvrDisabledCiphers().split(DISABLED_ENTRIES_SPLITTER);
factory.setExcludeCipherSuites(masks);