[
https://issues.apache.org/jira/browse/CASSANDRA-13259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16352927#comment-16352927
]
Jason Brown edited comment on CASSANDRA-13259 at 2/5/18 8:54 PM:
-----------------------------------------------------------------
Circling back to this, I'd like to just reduce the scope back to the original
intent of this ticket (update {{server_encryption_options/algorithm}}) to the
new default, and leave the discussion of other yaml props to CASSANDRA-13314.
That way we can commit this one and get it out of the way. wdyt,
[[email protected]]? We still need an {{alogrithm}} parameter after
CASSANDRA-8457/CASSANDRA-10404 as we need it when building the
[{{TrustManagerFactory}}|https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/security/SSLFactory.java#L108]
and
[{{KeyManagerFactory}}|https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/security/SSLFactory.java#L124]
in {{SSLFactory}}.
Also, should we consider applying to 3.0 and 3.11, as well?
was (Author: jasobrown):
Circling back to this, I'd like to just reduce the scope back to the original
intent of this ticket (update {{server_encryption_options/algorithm}}) to the
new default, and leave the discussion of other yaml props to CASSANDRA-13314.
That way we can commit this one and get it out of the way. wdyt,
[[email protected]]? We still need an {{alogrithm}} parameter after
CASSANDRA-8457/CASSANDRA-10404 as we need it when building the
[{{TrustManagerFactory}}|https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/security/SSLFactory.java#L108]
and
[{{KeyManagerFactory}}|https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/security/SSLFactory.java#L124]
in {{SSLFactory}}.
> Use platform specific X.509 default algorithm
> ---------------------------------------------
>
> Key: CASSANDRA-13259
> URL: https://issues.apache.org/jira/browse/CASSANDRA-13259
> Project: Cassandra
> Issue Type: Improvement
> Components: Configuration
> Reporter: Stefan Podkowinski
> Assignee: Stefan Podkowinski
> Priority: Minor
> Fix For: 4.x
>
>
> We should replace the hardcoded "SunX509" default algorithm and use the JRE
> default instead. This implementation will currently not work on less popular
> platforms (e.g. IBM) and won't get any further updates.
> See also:
> https://bugs.openjdk.java.net/browse/JDK-8169745
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
