瀏覽代碼

HUE-8474 [docs] Update manual.md for SASL and TLS configurations

Ying Chen 7 年之前
父節點
當前提交
bd564b8
共有 1 個文件被更改,包括 12 次插入3 次删除
  1. 12 3
      docs/admin-manual/manual.md

+ 12 - 3
docs/admin-manual/manual.md

@@ -485,6 +485,15 @@ using a proper SSL Certificate.  Self-signed certificates don't
 work.
 </div>
 
+Note: The security vulnerability SWEET32 is also called Birthday attacks against TLS ciphers with 64bit block size and it is assigned CVE-2016-2183. This is due to legacy block ciphers 
+having block size of 64 bits are vulnerable to a practical collision attack when used in CBC mode.
+
+DES/3DES are the only ciphers has block size of 64-bit. One way to config Hue not to use them:
+<pre>
+  [desktop]
+  ssl_cipher_list=DEFAULT:!DES:!3DES
+</pre>
+
 ### SASL
 
 When getting a bigger result set from Hive/Impala or bigger files like images from HBase, the response requires to increase
@@ -492,12 +501,12 @@ the buffer size of SASL lib for thrift sasl communication.
 
 <pre>
   [desktop]
-  # This property specifies the maximum size of the receive buffer in bytes in thrift sasl communication (default 2 MB).
-  sasl_max_buffer=2 * 1024 * 1024
+  # This property specifies the maximum size of the receive buffer in bytes in thrift sasl communication,
+  # default value is 2097152 (2 MB), which equals to (2 * 1024 * 1024)
+  sasl_max_buffer=2097152
 </pre>
 
 ### User Admin Configuration
-
 In the `[useradmin]` section of the configuration file, you can
 _optionally_ specify the following: