Alexey Serbin has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/13683 )

Change subject: KUDU-2871 (part 1): disable TLS 1.3.
......................................................................

KUDU-2871 (part 1): disable TLS 1.3.

This disables TLS 1.3 for our RPC negotiations, since the 1.5-RTT
optimization breaks an assumption that the server sends the last token
in the negotiation exchange.

Tested that this fixes tls_handshake-test with Ubuntu 18 and libssl
1.1.1.

Change-Id: I431a1352ce1b8cca61b60c2dafbebadb4303e08a
Reviewed-on: http://gerrit.cloudera.org:8080/13683
Reviewed-by: Alexey Serbin <[email protected]>
Tested-by: Kudu Jenkins
---
M src/kudu/rpc/client_negotiation.cc
M src/kudu/security/tls_context.cc
2 files changed, 10 insertions(+), 1 deletion(-)

Approvals:
  Alexey Serbin: Looks good to me, approved
  Kudu Jenkins: Verified

--
To view, visit http://gerrit.cloudera.org:8080/13683
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I431a1352ce1b8cca61b60c2dafbebadb4303e08a
Gerrit-Change-Number: 13683
Gerrit-PatchSet: 2
Gerrit-Owner: Todd Lipcon <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)

Reply via email to