Details
-
Bug
-
Status: Closed
-
Blocker
-
Resolution: Fixed
-
1.5.0
-
None
Description
The changes of FLINK-9310 causes Flink to fail when sending data between TaskManagers as reported by a user [1]. The problem seems to be that Netty's SslHandler (v4.0.27) tries to allocate heap buffers when using a GCM enabled cypher suite. However, since we explicitly prohibit the allocation of heap buffers it fails. In later Netty versions, this behaviour seems to be fixed.
I propose to revert the changes of FLINK-9310 and set the default cypher algorithm to TLS_RSA_WITH_AES_128_CBC_SHA.
Attachments
Issue Links
- is related to
-
FLINK-9310 Update default cyphersuites
- Closed