-
Notifications
You must be signed in to change notification settings - Fork 3.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
HBASE-28122: Support TLSv1.3 cipher suites #5444
Conversation
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
💔 -1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
} else { | ||
return DEFAULT_CIPHERS_JAVA8; | ||
} | ||
} catch (NumberFormatException ignore) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I prefer the old way for testing whether we could parse the java version, NumberFormatException is a RuntimeException, usually we should not consider catching a RuntimeException, just avoid throwing it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I haven't forgotten about this comment, just had some other stuff take priority.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This change is done now
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OVerall LGTM.
hbase-common/src/main/java/org/apache/hadoop/hbase/io/crypto/tls/X509Util.java
Show resolved
Hide resolved
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
🎊 +1 overall
This message was automatically generated. |
Co-authored-by: Charles Connell <cconnell@hubspot.com> Signed-off-by: Duo Zhang <zhangduo@apache.org> (cherry picked from commit d8b5198)
Co-authored-by: Charles Connell <cconnell@hubspot.com> Signed-off-by: Duo Zhang <zhangduo@apache.org> (cherry picked from commit d8b5198)
When using OpenSSL/BoringSSL, put these cipher suites at the top of our preference list always. When using the JDK cipher support, only put these on the list if on JDK 11+.