HTHou opened a new pull request, #3600: URL: https://github.com/apache/thrift/pull/3600
## What changed - Set the C++ `TSSLSocketFactory` default `SSLTLS` context to keep version-flexible negotiation while using TLS 1.2 as the default protocol floor. - Add a custom `SSLContext` factory constructor so applications can adjust OpenSSL context options before socket creation when they need a different protocol range. - Update the C++ SSL security tests and README note for the default behavior. ## Validation - `PATH="/opt/homebrew/opt/bison/bin:$PATH" BOOST_ROOT=/opt/homebrew/opt/boost ./configure --with-boost=/opt/homebrew/opt/boost --with-boost-libdir=/opt/homebrew/opt/boost/lib --with-openssl=/opt/homebrew/opt/openssl@3` - `PATH="/opt/homebrew/opt/bison/bin:$PATH" make -C lib/cpp CPPFLAGS="-I/opt/homebrew/opt/openssl@3/include"` - `PATH="/opt/homebrew/opt/bison/bin:$PATH" make -C lib/cpp/test CPPFLAGS="-I/opt/homebrew/opt/openssl@3/include" BOOST_SYSTEM_LDADD= SecurityTest SecurityFromBufferTest` - `cd lib/cpp/test && DYLD_LIBRARY_PATH="../.libs:.libs:$DYLD_LIBRARY_PATH" ./SecurityTest -- ../../../test/keys` - `cd lib/cpp/test && DYLD_LIBRARY_PATH="../.libs:.libs:$DYLD_LIBRARY_PATH" ./SecurityFromBufferTest -- ../../../test/keys` The SSL matrix tests print expected shutdown messages for protocol combinations that do not complete negotiation. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
