Alexey Serbin has submitted this change and it was merged.

Change subject: [ssl] disable SSL/TLS compression
......................................................................


[ssl] disable SSL/TLS compression

As for the best recommended practices for SSL/TLS deployment,
disable compression even if it's supported the both connection peers.

  https://tools.ietf.org/html/rfc7525#section-3.3

Also, disabling SSL/TLS compression frees CPU resources.

Change-Id: Ib470d1c00abb5a4bdf4650fc3ed19b6d588ea78f
Reviewed-on: http://gerrit.cloudera.org:8080/4962
Tested-by: Kudu Jenkins
Reviewed-by: Dan Burkert <[email protected]>
---
M src/kudu/util/net/ssl_factory.cc
1 file changed, 7 insertions(+), 1 deletion(-)

Approvals:
  Dan Burkert: Looks good to me, approved
  Kudu Jenkins: Verified



-- 
To view, visit http://gerrit.cloudera.org:8080/4962
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ib470d1c00abb5a4bdf4650fc3ed19b6d588ea78f
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Dan Burkert <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Sailesh Mukil <[email protected]>
Gerrit-Reviewer: Todd Lipcon <[email protected]>

Reply via email to