[
https://issues.apache.org/jira/browse/IMPALA-7519?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16615093#comment-16615093
]
Thomas Tauber-Marshall commented on IMPALA-7519:
------------------------------------------------
The motivation is security primarily. There's an Impala user who has business
requirements for using this type of cipher.
Fwiw, we already support this in the krpc stack, this would just be to extend
the same support to the thrift stack.
I have a review out here: https://gerrit.cloudera.org/#/c/11376/
> Support elliptic curve ssl ciphers
> ----------------------------------
>
> Key: IMPALA-7519
> URL: https://issues.apache.org/jira/browse/IMPALA-7519
> Project: IMPALA
> Issue Type: Improvement
> Components: Backend, Clients
> Affects Versions: Impala 3.1.0
> Reporter: Thomas Tauber-Marshall
> Assignee: Thomas Tauber-Marshall
> Priority: Major
> Labels: security
>
> Thrift's SSLSocketFactory class does not support setting ciphers that use
> ecdh. We already override this class for others reasons, it would be
> straightforward to add the necessary openssl calls to enable this.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
