From 2be559b8429a2d8b9d924bb16a67ad67d9bd7f40 Mon Sep 17 00:00:00 2001
From: John Zhuge <jzhuge@apache.org>
Date: Fri, 12 May 2017 07:52:32 -0700
Subject: [PATCH] HADOOP-14417. Update default SSL cipher list for KMS.
 Contributed by John Zhuge.

---
 .../hadoop-kms/src/main/libexec/kms-config.sh                | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/hadoop-common-project/hadoop-kms/src/main/libexec/kms-config.sh b/hadoop-common-project/hadoop-kms/src/main/libexec/kms-config.sh
index 009f9c4557a..210b87ab5fa 100644
--- a/hadoop-common-project/hadoop-kms/src/main/libexec/kms-config.sh
+++ b/hadoop-common-project/hadoop-kms/src/main/libexec/kms-config.sh
@@ -192,11 +192,6 @@ if [ "${KMS_SSL_CIPHERS}" = "" ]; then
   KMS_SSL_CIPHERS+=",TLS_RSA_WITH_AES_128_CBC_SHA256"
   KMS_SSL_CIPHERS+=",TLS_RSA_WITH_AES_128_CBC_SHA"
   KMS_SSL_CIPHERS+=",TLS_RSA_WITH_3DES_EDE_CBC_SHA"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
   print "Setting KMS_SSL_CIPHERS:           ${KMS_SSL_CIPHERS}"
 else
   print "Using   KMS_SSL_CIPHERS:           ${KMS_SSL_CIPHERS}"