Sfoglia il codice sorgente

HADOOP-14417. Update default SSL cipher list for KMS. Contributed by John Zhuge.

John Zhuge 8 anni fa
parent
commit
2be559b842

+ 0 - 5
hadoop-common-project/hadoop-kms/src/main/libexec/kms-config.sh

@@ -192,11 +192,6 @@ if [ "${KMS_SSL_CIPHERS}" = "" ]; then
   KMS_SSL_CIPHERS+=",TLS_RSA_WITH_AES_128_CBC_SHA256"
   KMS_SSL_CIPHERS+=",TLS_RSA_WITH_AES_128_CBC_SHA"
   KMS_SSL_CIPHERS+=",TLS_RSA_WITH_3DES_EDE_CBC_SHA"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
-  KMS_SSL_CIPHERS+=",TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
   print "Setting KMS_SSL_CIPHERS:           ${KMS_SSL_CIPHERS}"
 else
   print "Using   KMS_SSL_CIPHERS:           ${KMS_SSL_CIPHERS}"