jai1 opened a new pull request #1225: Enable specification of TLS Protocol Versions and Cipher Suites URL: https://github.com/apache/incubator-pulsar/pull/1225 ### Motivation Enable listening services (Broker, Proxy, Discovery Provider) to specify which TLS Protocol Versions and Cipher Suites they will negotiate with. This is useful when you don't want the client to use downgraded protocols or ciphers which are weak. ### Modifications Major code change is in SecurityUtility.createNettySslContextForServer rest is just config changes and tests. ### Result Clients can't force servers (Broker, Proxy, Discovery Provider) to use downgraded protocols or ciphers which are weak.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services
