Apache/hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HADOOP-11217. Disable SSLv3 in KMS. (Robert Kanter via kasha)

Browse Source 
(cherry picked from commit 1a780823384a9c4289b8bb0b3c73e6b886d78fd0)
This commit is contained in:
Karthik Kambatla 2014-10-28 17:18:24 -07:00
parent bbdd990864
commit 0aec884704
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hadoop-common-project/hadoop-common/CHANGES.txt
View File

@ -669,6 +669,8 @@ Release 2.6.0 - UNRELEASED
HADOOP-11170. ZKDelegationTokenSecretManager fails to renewToken created by HADOOP-11170. ZKDelegationTokenSecretManager fails to renewToken created by
a peer. (Arun Suresh and Gregory Chanan via kasha) a peer. (Arun Suresh and Gregory Chanan via kasha)
HADOOP-11217. Disable SSLv3 in KMS. (Robert Kanter via kasha)
Release 2.5.1 - 2014-09-05 Release 2.5.1 - 2014-09-05
INCOMPATIBLE CHANGES INCOMPATIBLE CHANGES

2
hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml
View File

@ -70,7 +70,7 @@
described in the APR documentation --> described in the APR documentation -->
<Connector port="${kms.http.port}" protocol="HTTP/1.1" SSLEnabled="true" <Connector port="${kms.http.port}" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="${kms.max.threads}" scheme="https" secure="true" maxThreads="${kms.max.threads}" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" clientAuth="false" sslEnabledProtocols="TLSv1"
keystoreFile="${kms.ssl.keystore.file}" keystoreFile="${kms.ssl.keystore.file}"
keystorePass="${kms.ssl.keystore.pass}"/> keystorePass="${kms.ssl.keystore.pass}"/>