GitHub user WangTaoTheTonic opened a pull request:
https://github.com/apache/flink/pull/3486
[FLINK-5981][SECURITY]make ssl version and cipher suites work as configured
I configured ssl and start flink job, but found configured properties
cannot apply properly:
```
akka port: only ciper suites apply right, ssl version not
blob server/netty server: both ssl version and ciper suites are not like
what I configured
```
I've found out the reason why:
http://stackoverflow.com/questions/11504173/sslcontext-initialization (for
blob server and netty server)
https://groups.google.com/forum/#!topic/akka-user/JH6bGnWE8kY(for akka ssl
version, it's fixed in akka 2.4:https://github.com/akka/akka/pull/21078)
Configs:
```
security.ssl.protocol: TLSv1.1
security.ssl.algorithms: TLS_RSA_WITH_AES_128_CBC_SHA
```
**The scan results before:**
**The scan results after fix:**
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/WangTaoTheTonic/flink FLINK-5981
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/flink/pull/3486.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #3486
----
commit c75c2e3f38e0a856ead1316223ad3d81061e4252
Author: WangTaoTheTonic <[email protected]>
Date: 2017-03-07T12:05:21Z
make ssl version and cipher suites work as configured
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
