Repository: hadoop Updated Branches: refs/heads/trunk 176ff5ce9 -> 66428d33a
HADOOP-11218. Add TLSv1.1,TLSv1.2 to KMS, HttpFS, SSLFactory. Contributed by Vijay Singh. Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/66428d33 Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/66428d33 Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/66428d33 Branch: refs/heads/trunk Commit: 66428d33a7b6e3de59f63ecdd05d59f7d805527b Parents: 176ff5c Author: Haohui Mai <[email protected]> Authored: Sun Nov 22 16:00:34 2015 -0800 Committer: Haohui Mai <[email protected]> Committed: Sun Nov 22 16:00:34 2015 -0800 ---------------------------------------------------------------------- hadoop-common-project/hadoop-common/CHANGES.txt | 3 +++ .../hadoop-kms/src/main/tomcat/ssl-server.xml.conf | 2 +- .../hadoop-hdfs-httpfs/src/main/tomcat/ssl-server.xml.conf | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hadoop/blob/66428d33/hadoop-common-project/hadoop-common/CHANGES.txt ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-common/CHANGES.txt b/hadoop-common-project/hadoop-common/CHANGES.txt index bc6a44d..8863837 100644 --- a/hadoop-common-project/hadoop-common/CHANGES.txt +++ b/hadoop-common-project/hadoop-common/CHANGES.txt @@ -1431,6 +1431,9 @@ Release 2.8.0 - UNRELEASED HADOOP-11901. BytesWritable fails to support 2G chunks due to integer overflow. (Reynold Xin via wheat9) + HADOOP-11218. Add TLSv1.1,TLSv1.2 to KMS, HttpFS, SSLFactory. + (Vijay Singh via wheat9) + Release 2.7.3 - UNRELEASED INCOMPATIBLE CHANGES http://git-wip-us.apache.org/repos/asf/hadoop/blob/66428d33/hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml.conf ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml.conf b/hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml.conf index b60da47..05b53e0 100644 --- a/hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml.conf +++ b/hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml.conf @@ -70,7 +70,7 @@ described in the APR documentation --> <Connector port="${kms.http.port}" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="${kms.max.threads}" scheme="https" secure="true" - clientAuth="false" sslEnabledProtocols="TLSv1,SSLv2Hello" + clientAuth="false" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2,SSLv2Hello" truststorePass="_kms_ssl_truststore_pass_" keystoreFile="${kms.ssl.keystore.file}" keystorePass="_kms_ssl_keystore_pass_"/> http://git-wip-us.apache.org/repos/asf/hadoop/blob/66428d33/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/tomcat/ssl-server.xml.conf ---------------------------------------------------------------------- diff --git a/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/tomcat/ssl-server.xml.conf b/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/tomcat/ssl-server.xml.conf index 4a90532..124a5e4 100644 --- a/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/tomcat/ssl-server.xml.conf +++ b/hadoop-hdfs-project/hadoop-hdfs-httpfs/src/main/tomcat/ssl-server.xml.conf @@ -70,7 +70,7 @@ described in the APR documentation --> <Connector port="${httpfs.http.port}" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" - clientAuth="false" sslEnabledProtocols="TLSv1,SSLv2Hello" + clientAuth="false" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2,SSLv2Hello" keystoreFile="${httpfs.ssl.keystore.file}" keystorePass="_httpfs_ssl_keystore_pass_"/>
