[ https://issues.apache.org/jira/browse/CASSANDRA-11164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15167015#comment-15167015 ]
Stefan Podkowinski commented on CASSANDRA-11164: ------------------------------------------------ {{SSLFactoryTest.testServerSocketCiphers()}} has been fixed and will now work with JVMs that won't support all ciphers specified by config. Removed {{UnknownHostException}} and added line to CHANGES.txt. ||2.2||3.0||trunk|| |[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-11164]|[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-11164-3.0]|[branch|https://github.com/spodkowinski/cassandra/tree/CASSANDRA-11164-trunk]| |[testall|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-11164-testall/]|[testall|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-11164-3.0-testall/]|[testall|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-11164-trunk-testall/]| |[dtest|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-11164-dtest/]|[dtest|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-11164-3.0-dtest/]|[dtest|http://cassci.datastax.com/view/Dev/view/spodkowinski/job/spodkowinski-CASSANDRA-11164-trunk-dtest/]| Patch merged upwards cleanly for me. > Order and filter cipher suites correctly > ---------------------------------------- > > Key: CASSANDRA-11164 > URL: https://issues.apache.org/jira/browse/CASSANDRA-11164 > Project: Cassandra > Issue Type: Bug > Reporter: Tom Petracca > Assignee: Stefan Podkowinski > Priority: Minor > Fix For: 2.2.x > > Attachments: 11164-2.2.txt, 11164-2.2_1_preserve_cipher_order.patch, > 11164-2.2_2_call_filterCipherSuites_everywhere.patch > > > As pointed out in https://issues.apache.org/jira/browse/CASSANDRA-10508, > SSLFactory.filterCipherSuites() doesn't respect the ordering of desired > ciphers in cassandra.yaml. > Also the fix that occurred for > https://issues.apache.org/jira/browse/CASSANDRA-3278 is incomplete and needs > to be applied to all locations where we create an SSLSocket so that JCE is > not required out of the box or with additional configuration. -- This message was sent by Atlassian JIRA (v6.3.4#6332)