Alexey Kukushkin created IGNITE-15336:
-----------------------------------------

             Summary: TLSv1.3 and Java 11
                 Key: IGNITE-15336
                 URL: https://issues.apache.org/jira/browse/IGNITE-15336
             Project: Ignite
          Issue Type: Improvement
    Affects Versions: 2.10
            Reporter: Alexey Kukushkin


Enhance Ignite to support TLSv1.3 with Java 11.

Ignite currently does not support TLSv1.3 with Java 11. This is 
[documented|https://ignite.apache.org/docs/latest/setup#running-ignite-with-java-11-or-later]:
 

_TLSv1.3, which is available in Java 11, is not supported at the moment. 
Consider adding {{‑Djdk.tls.client.protocols=TLSv1.2}} if SSL between nodes is 
used._
h3. Reproducer

The problem can be reproduced by trying to connect an Ignite Java thin client 
to Ignite server over an secure connection.

Add TLSv1.3 to the list of protocols in {{SSLContext}} and set the 
{{SSLContext}} in the {{ClientConnectorConfiguration}} on the server and 
{{ClientConfiguration}} on the client.

An attempt to {{Ignition.startClient({sslContext: {protocols: ['TLSv1.3']}})}} 
fails with a {{ClientConnectionException}} saying _Channel is closed_.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to