[
https://issues.apache.org/jira/browse/CASSANDRA-16695?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17362216#comment-17362216
]
Ekaterina Dimitrova commented on CASSANDRA-16695:
-------------------------------------------------
[2.2 | https://github.com/ekaterinadimitrova2/cassandra/pull/141] | [CI
run|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/957/workflows/e7524714-b3db-4dc2-86a5-138d836d8363]
[3.0 | https://github.com/ekaterinadimitrova2/cassandra/pull/142| ] | [CI
run|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/963/workflows/315bd1ba-a437-4d01-aa2b-c938ee094a00]
[3.11 | https://github.com/ekaterinadimitrova2/cassandra/pull/143] | [CI run |
https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/964/workflows/4768f7cb-18e2-495c-87c3-4bbac98ea758]
[4.0.0 |https://github.com/ekaterinadimitrova2/cassandra/pull/144 ] | CI [Java
8|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/966/workflows/d55aef8f-24fc-4024-b3bc-587fbfca5c32]
| [Java
11|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/966/workflows/cab3c0cb-c2ba-491b-85fe-fb70f50572f8]
[4.0|https://github.com/ekaterinadimitrova2/cassandra/pull/131] | CI [Java
8|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/968/workflows/a0e41baa-1d54-4bfb-b4da-55ffc2fb7413]
| [Java
11|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/968/workflows/0200263f-dea9-4449-a422-0e51f066ca42]
[trunk|https://github.com/ekaterinadimitrova2/cassandra/pull/145] CI [java
8|https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/971/workflows/e7cd9921-60ad-46dd-a70c-5f7fa99e83bd]
| [Java 11|
https://app.circleci.com/pipelines/github/ekaterinadimitrova2/cassandra/971/workflows/95501365-4c62-44ae-9724-e4b796f6581c]
> cqlsh should prefer newer TLS version by default
> ------------------------------------------------
>
> Key: CASSANDRA-16695
> URL: https://issues.apache.org/jira/browse/CASSANDRA-16695
> Project: Cassandra
> Issue Type: Improvement
> Components: Tool/cqlsh
> Reporter: Justin Chu
> Assignee: Ekaterina Dimitrova
> Priority: Normal
> Labels: cqlsh
> Fix For: 4.0, 2.2.x, 3.0.x, 3.11.x, 4.0-rc, 4.x
>
>
> Some new JDK releases started to disable TLSv1.0 and TLSv1.1.
> [https://www.oracle.com/java/technologies/javase/8u291-relnotes.html]
>
> However, the code in:
> [https://github.com/apache/cassandra/blob/trunk/pylib/cqlshlib/sslhandling.py#L56-L65]
> is defaulting to those rather old versions,
> which could lead to the following problem:
> {code:java}
> ('Unable to connect to any servers', {'10.101.34.89:9042': error(1, u"Tried
> connecting to [('10.101.34.89', 9042)]. Last error: [SSL:
> WRONG_VERSION_NUMBER] wrong version number (_ssl.c:618)")}) {code}
>
> Python2 default TLS protocol
> [https://docs.python.org/2/library/ssl.html#ssl.PROTOCOL_TLS]
> Python3 default TLS protocol
> [https://docs.python.org/3/library/ssl.html#ssl.PROTOCOL_TLS]
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
