[
https://issues.apache.org/jira/browse/IGNITE-15336?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17418034#comment-17418034
]
Ivan Daschinsky commented on IGNITE-15336:
------------------------------------------
TLS 1.3 is backported to jdk 1.8 and also doesn't work properly in ignite.
> TLSv1.3 and Java 11
> -------------------
>
> Key: IGNITE-15336
> URL: https://issues.apache.org/jira/browse/IGNITE-15336
> Project: Ignite
> Issue Type: Improvement
> Affects Versions: 2.10
> Reporter: Alexey Kukushkin
> Priority: Major
>
> Enhance Ignite to support TLSv1.3 with Java 11.
> Ignite currently does not support TLSv1.3 with Java 11. This is
> [documented|https://ignite.apache.org/docs/latest/setup#running-ignite-with-java-11-or-later]:
>
> _TLSv1.3, which is available in Java 11, is not supported at the moment.
> Consider adding {{‑Djdk.tls.client.protocols=TLSv1.2}} if SSL between nodes
> is used._
> h3. Reproducer
> The problem can be reproduced by trying to connect an Ignite Java thin client
> to Ignite server over an secure connection.
> Add TLSv1.3 to the list of protocols in {{SSLContext}} and set the
> {{SSLContext}} in the {{ClientConnectorConfiguration}} on the server and
> {{ClientConfiguration}} on the client.
> An attempt to {{Ignition.startClient({sslContext: {protocols:
> ['TLSv1.3']}})}} fails with a {{ClientConnectionException}} saying _Channel
> is closed_.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
