Apache
/
hadoop
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HADOOP-11217. Disable SSLv3 in KMS. (Robert Kanter via kasha)

This commit is contained in:
Karthik Kambatla 2014-10-28 17:18:24 -07:00
parent 675bca2968
commit 1a78082338
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hadoop-common-project/hadoop-common/CHANGES.txt
View File

@ -1013,6 +1013,8 @@ Release 2.6.0 - UNRELEASED
HADOOP-11170. ZKDelegationTokenSecretManager fails to renewToken created by HADOOP-11170. ZKDelegationTokenSecretManager fails to renewToken created by
a peer. (Arun Suresh and Gregory Chanan via kasha) a peer. (Arun Suresh and Gregory Chanan via kasha)
HADOOP-11217. Disable SSLv3 in KMS. (Robert Kanter via kasha)
Release 2.5.1 - 2014-09-05 Release 2.5.1 - 2014-09-05
INCOMPATIBLE CHANGES INCOMPATIBLE CHANGES

2
hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml
View File

@ -70,7 +70,7 @@
described in the APR documentation --> described in the APR documentation -->
<Connector port="${kms.http.port}" protocol="HTTP/1.1" SSLEnabled="true" <Connector port="${kms.http.port}" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="${kms.max.threads}" scheme="https" secure="true" maxThreads="${kms.max.threads}" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" clientAuth="false" sslEnabledProtocols="TLSv1"
keystoreFile="${kms.ssl.keystore.file}" keystoreFile="${kms.ssl.keystore.file}"
keystorePass="${kms.ssl.keystore.pass}"/> keystorePass="${kms.ssl.keystore.pass}"/>