[
https://issues.apache.org/jira/browse/IMPALA-14312?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jason Fehr resolved IMPALA-14312.
---------------------------------
Resolution: Fixed
> ssl_minimum_version Validator Failing on Empty Value
> ----------------------------------------------------
>
> Key: IMPALA-14312
> URL: https://issues.apache.org/jira/browse/IMPALA-14312
> Project: IMPALA
> Issue Type: Bug
> Affects Versions: Impala 5.0.0
> Reporter: Jason Fehr
> Assignee: Jason Fehr
> Priority: Critical
> Fix For: Impala 5.0.0
>
>
> The validator for ssl_minimum_version added
> [here|https://gerrit.cloudera.org/c/22924/99/be/src/service/impala-server.cc#260]
> has a couple issues.
> 1. The value can be empty as long as TLS is not configured. The validator is
> failing whenever this value is empty no matter if TLS is enabled/disabled.
> 2. The value "tlsv1.0" is not valid based on
> [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/rpc/thrift-server.cc#L74-L77],
>
> [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/kudu/security/tls_context.cc#L119-L122],
> and
> [this|https://github.com/apache/impala/blob/8053a68f3940e1c5c2533d0e263fb039ed91277b/be/src/util/webserver-test.cc#L403].
> 3. The value "tlsv1.3" is not supported by Thrift.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
