Uploaded image for project: 'Geode'
  1. Geode
  2. GEODE-10297

SSL protocol ordering can result in loss of newer protocol support.

    XMLWordPrintableJSON

Details

    Description

      If ssl-protocols is listed with a older protocol version ahead of a newer the SSLContext used will support at most that weaker protocol.

      For example ssl-protocols=TLSV1.2,TLSv1.3,TLSv1.1 will use the TLSv1.2 SSLContext, which will not support, and silently ignore, the TLSv1.3 configuration. The effective enabled protocols list will be TLSV1.2,TLSv1.1.

      Attachments

        Issue Links

          Activity

            People

              donalevans Donal Evans
              jbarrett Jacob Barrett
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: