Alexey Serbin has uploaded this change for review. ( http://gerrit.cloudera.org:8080/17189
Change subject: WIP KUDU-2871 support TLSv1.3 in Kudu RPC (C++ part) ...................................................................... WIP KUDU-2871 support TLSv1.3 in Kudu RPC (C++ part) With this patch Kudu servers and Kudu C++ client can use TLSv1.3 for securing Kudu RPC communication. All tests run between C++ components now use TLSv1.3 when compiled with OpenSSL 1.1.1 and newer. This patch also contains a new test to exercise TLSv1.3 handshake in the context of establishing a connection for Kudu RPC. WIP: * add informative description for the changelist * add run-time flag to control the list of TLSv1.3 ciphers * pass the list of TLSv1.3 ciphers into TlsContext constructor * add validator for newly added --rpc_tls_excluded_protocols flag Change-Id: Ia92a4d102c3c8cff76101e71ff71d24a9d78b672 --- M src/kudu/rpc/client_negotiation.cc M src/kudu/rpc/messenger.cc M src/kudu/rpc/messenger.h M src/kudu/rpc/rpc-test.cc M src/kudu/rpc/server_negotiation.cc M src/kudu/security/tls_context.cc M src/kudu/security/tls_context.h M src/kudu/security/tls_handshake-test.cc M src/kudu/security/tls_handshake.cc M src/kudu/security/tls_handshake.h M src/kudu/security/tls_socket.cc M src/kudu/server/server_base.cc 12 files changed, 534 insertions(+), 106 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/89/17189/1 -- To view, visit http://gerrit.cloudera.org:8080/17189 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: Ia92a4d102c3c8cff76101e71ff71d24a9d78b672 Gerrit-Change-Number: 17189 Gerrit-PatchSet: 1 Gerrit-Owner: Alexey Serbin <[email protected]>
