فهرست منبع

HADOOP-11217. (Addendum to allow SSLv2Hello) Disable SSLv3 in KMS. (Robert Kanter via kasha)

(cherry picked from commit 87818ef4e7c1a49dc3b0d6766cceb3499b07b837)
Karthik Kambatla 10 سال پیش
والد
کامیت
6e64390627
1فایلهای تغییر یافته به همراه1 افزوده شده و 1 حذف شده
  1. 1 1
      hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml

+ 1 - 1
hadoop-common-project/hadoop-kms/src/main/tomcat/ssl-server.xml

@@ -70,7 +70,7 @@
          described in the APR documentation -->
     <Connector port="${kms.http.port}" protocol="HTTP/1.1" SSLEnabled="true"
                maxThreads="${kms.max.threads}" scheme="https" secure="true"
-               clientAuth="false" sslEnabledProtocols="TLSv1"
+               clientAuth="false" sslEnabledProtocols="TLSv1,SSLv2Hello"
                keystoreFile="${kms.ssl.keystore.file}"
                keystorePass="${kms.ssl.keystore.pass}"/>