Skip to content

Conversation

Scooletz
Copy link
Contributor

@Scooletz Scooletz commented Jul 10, 2019

This PR changes the way SSLProtocols are resoled when no client-side certPath specified. Before this change, whenever the certPath was not specified the following methods was used:

sslStream.AuthenticateAsClient(certificateName);

which underneath delegates the selection to ServicePointManager.DefaultSslProtocols. This means that the user setting for the SSL/TLS protocol was ignored. With this change it always uses the value specified by the client.

Risks

Potentially this is a breaking change, as whenever the setting in Hazelcast settings was different from the ServicePointManager, it would impact the selection.

@devOpsHazelcast
Copy link
Contributor

Linux Net Core Tests PASSed.

@devOpsHazelcast
Copy link
Contributor

Windows .Net Framework Tests PASSed.

@devOpsHazelcast
Copy link
Contributor

Windows Net Core Tests PASSed.

@Scooletz Scooletz requested a review from asimarslan July 12, 2019 09:02
@Scooletz Scooletz marked this pull request as ready for review July 16, 2019 07:40
@asimarslan asimarslan added the Priority: Critical Critical Priority. label Jul 16, 2019
@asimarslan asimarslan added this to the 3.12.1 milestone Jul 16, 2019
@Scooletz Scooletz merged commit 914cb1e into master Jul 16, 2019
@Scooletz Scooletz deleted the ssl branch July 16, 2019 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Priority: Critical Critical Priority.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants