Jason Fehr created IMPALA-14329:
-----------------------------------

             Summary: Support TLSv1.3 as Minimum Version
                 Key: IMPALA-14329
                 URL: https://issues.apache.org/jira/browse/IMPALA-14329
             Project: IMPALA
          Issue Type: Improvement
            Reporter: Jason Fehr


The impala startup flag "ssl_minimum_version" cannot be set to "tlsv1.3" 
because Thrift does not support using TLS 1.3 as the minimum version.  See 
[here|https://github.com/apache/impala/blob/75ca356ed0451e1a98f70433a4d2729018b68d32/be/src/rpc/thrift-server.cc#L72-L78]
 and 
[here|https://github.com/apache/thrift/blob/2a93df80f27739ccabb5b885cb12a8dc7595ecdf/lib/cpp/src/thrift/transport/TSSLSocket.h#L37-L45].

Once Thrift supports TLS v1.3, update Impala to allow this version to be used 
as the minimum ssl version.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to