|
|
@@ -485,6 +485,15 @@ using a proper SSL Certificate. Self-signed certificates don't
|
|
|
work.
|
|
|
</div>
|
|
|
|
|
|
+Note: The security vulnerability SWEET32 is also called Birthday attacks against TLS ciphers with 64bit block size and it is assigned CVE-2016-2183. This is due to legacy block ciphers
|
|
|
+having block size of 64 bits are vulnerable to a practical collision attack when used in CBC mode.
|
|
|
+
|
|
|
+DES/3DES are the only ciphers has block size of 64-bit. One way to config Hue not to use them:
|
|
|
+<pre>
|
|
|
+ [desktop]
|
|
|
+ ssl_cipher_list=DEFAULT:!DES:!3DES
|
|
|
+</pre>
|
|
|
+
|
|
|
### SASL
|
|
|
|
|
|
When getting a bigger result set from Hive/Impala or bigger files like images from HBase, the response requires to increase
|
|
|
@@ -492,12 +501,12 @@ the buffer size of SASL lib for thrift sasl communication.
|
|
|
|
|
|
<pre>
|
|
|
[desktop]
|
|
|
- # This property specifies the maximum size of the receive buffer in bytes in thrift sasl communication (default 2 MB).
|
|
|
- sasl_max_buffer=2 * 1024 * 1024
|
|
|
+ # This property specifies the maximum size of the receive buffer in bytes in thrift sasl communication,
|
|
|
+ # default value is 2097152 (2 MB), which equals to (2 * 1024 * 1024)
|
|
|
+ sasl_max_buffer=2097152
|
|
|
</pre>
|
|
|
|
|
|
### User Admin Configuration
|
|
|
-
|
|
|
In the `[useradmin]` section of the configuration file, you can
|
|
|
_optionally_ specify the following:
|
|
|
|