Henry Robinson has submitted this change and it was merged. Change subject: IMPALA-5743: Allow TLS version configuration ......................................................................
IMPALA-5743: Allow TLS version configuration * Backport THRIFT-2258 to allow for configuration of supported TLS versions. * Rework patch so that either one specific version may be selected, or all versions including and following a specific version. So TLSv1_1 only allows TLS 1.1 connections, but TLSv1_1_plus allows TLS 1.1 and TLS 1.2 connections. This makes testing easier. * SSLv2 and v3 are explicitly disabled, always, as per previous patch. They are insecure and superseded by TLS. * Disable building Thrift's tutorial to slightly improve build times. Thrift patch is available at: https://github.com/henryr/thrift/commit/2bdc74de0a0874129e68371796362b1130227e42 Change-Id: Ida75e74682606eefcc59a17cb2dd2b4e71862e9c --- M buildall.sh M source/thrift/build.sh A source/thrift/thrift-0.9.0-patches/0010-THRIFT-2258-Add-TLS-configuration.patch 3 files changed, 136 insertions(+), 1 deletion(-) Approvals: Henry Robinson: Looks good to me, approved; Verified -- To view, visit http://gerrit.cloudera.org:8080/7558 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ida75e74682606eefcc59a17cb2dd2b4e71862e9c Gerrit-PatchSet: 3 Gerrit-Project: native-toolchain Gerrit-Branch: master Gerrit-Owner: Henry Robinson <[email protected]> Gerrit-Reviewer: Henry Robinson <[email protected]> Gerrit-Reviewer: Sailesh Mukil <[email protected]>
