Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KAFKA-7310: Fix testUnsupportedCiphers to work with Java 11 #5570

Merged
merged 1 commit into from
Aug 29, 2018

Conversation

ijuma
Copy link
Contributor

@ijuma ijuma commented Aug 25, 2018

Java 11 supports TLS 1.3 which has different cipher names than
previous TLS versions so the simplistic way of choosing ciphers
is not guaranteed to work. Fix it by configuring the context
to use TLS 1.2.

Committer Checklist (excluded from commit message)

  • Verify design and implementation
  • Verify test coverage and CI build status
  • Verify documentation (including upgrade notes)

@ijuma ijuma changed the title KAFKA-7310: Fix SslTransportLayerTest.testUnsupportedCiphers to work with Java 11 KAFKA-7310: Fix testUnsupportedCiphers to work with Java 11 Aug 25, 2018
Java 11 supports TLS 1.3 which has different cipher names than
previous TLS versions so the simplistic way of choosing ciphers
is not guaranteed to work. Fix it by configuring the context
to use TLS 1.2.
Copy link
Contributor

@rajinisivaram rajinisivaram left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ijuma Thanks for the PR, LGTM.

@rajinisivaram
Copy link
Contributor

Merging to trunk.

@rajinisivaram rajinisivaram merged commit d76965e into apache:trunk Aug 29, 2018
@ijuma ijuma deleted the kafka-7310-ssl-java-11 branch September 11, 2018 06:46
pengxiaolong pushed a commit to pengxiaolong/kafka that referenced this pull request Jun 14, 2019
…apache#5570)

Java 11 supports TLS 1.3 which has different cipher names than
previous TLS versions so the simplistic way of choosing ciphers
is not guaranteed to work. Fix it by configuring the context
to use TLS 1.2.

Reviewers: Rajini Sivaram <rajinisivaram@googlemail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants