浏览代码

HUE-7155 [backend] Hue needs to support TLSv1_1 and TLSv1_2 via Thrift connections

Testing Done:
- Manual testing
  - using resticted java services which enables only TLSv1.2 communication
     in java.security file: jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DH keySize < 768, 3DES_EDE_CBC
  - with this change, tested Hue communicates on TLSv1.2

(cherry picked from commit e5119b581344fb09761ac74a7113708a5106920f)
Prakash Ranade 8 年之前
父节点
当前提交
652bedb
共有 1 个文件被更改,包括 3 次插入3 次删除
  1. 3 3
      desktop/core/ext-py/thrift-0.9.1/src/transport/TSSLSocket.py

+ 3 - 3
desktop/core/ext-py/thrift-0.9.1/src/transport/TSSLSocket.py

@@ -34,9 +34,9 @@ class TSSLSocket(TSocket.TSocket):
 
   The protocol used is set using the class variable
   SSL_VERSION, which must be one of ssl.PROTOCOL_* and
-  defaults to  ssl.PROTOCOL_TLSv1 for greatest security.
+  defaults to  ssl.PROTOCOL_SSLv23 for greatest security.
   """
-  SSL_VERSION = ssl.PROTOCOL_TLSv1
+  SSL_VERSION = ssl.PROTOCOL_SSLv23
 
   def __init__(self,
                host='localhost',
@@ -165,7 +165,7 @@ class TSSLServerSocket(TSocket.TServerSocket):
   This uses the ssl module's wrap_socket() method to provide SSL
   negotiated encryption.
   """
-  SSL_VERSION = ssl.PROTOCOL_TLSv1
+  SSL_VERSION = ssl.PROTOCOL_SSLv23
 
   def __init__(self,
                host=None,