Hello Kudu Jenkins, Andrew Wong, Grant Henke,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/17245
to look at the new patch set (#3).
Change subject: KUDU-2871 support TLSv1.3 in Kudu RPC (Java part)
......................................................................
KUDU-2871 support TLSv1.3 in Kudu RPC (Java part)
With this patch, Kudu Java client is able to talk TLSv1.3 to the server
side. Essentially, this is about adding TLSv1.3 ciphers into the list
of preferred cipher suites in Negotiator.java and sending a chunk of
data produced by the final TLSv1.3 handshake iteration to the server
when the client senses that the TLS handshake is done.
Prior to this patch, Kudu Java client didn't support TLSv1.3 for RPC
because:
* It didn't have ciphers required for TLSv1.3
* It didn't send back the last chunk of data to the server side
in the end of the TLS handshake process
The former is crucial to allow for backward compatibility of Java
clients of prior versions to work with newer, TLSv1.3-capable
Kudu servers. In other words, TLSv1.2 is the highest protocol version
that Kudu Java clients of prior versions are able to use even if talking
to newer Kudu servers which are capable talking TLSv1.3.
This patch also contains a new test scenario to verify the functionality
of TLSv1.3-enabled RPC between a Java client and a Kudu cluster. The
newly added scenario runs only if both the JVM and the node's OpenSSL
library support TLSv1.3.
Change-Id: I884170bdbded8b4017a80db34ecc0a755426c5c2
---
M java/kudu-client/src/main/java/org/apache/kudu/client/Negotiator.java
A
java/kudu-client/src/test/java/org/apache/kudu/client/TestNegotiationTLSv13.java
2 files changed, 235 insertions(+), 20 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/45/17245/3
--
To view, visit http://gerrit.cloudera.org:8080/17245
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I884170bdbded8b4017a80db34ecc0a755426c5c2
Gerrit-Change-Number: 17245
Gerrit-PatchSet: 3
Gerrit-Owner: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Andrew Wong <[email protected]>
Gerrit-Reviewer: Grant Henke <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
