[HADOOP-16661] Support TLS 1.3 - ASF JIRA

XML

Word

Printable

JSON

Target Version/s:

3.3.0
Release Note:

Hide
Starting with Hadoop 3.3.0, TLS 1.3 is supported on Java 11 Runtime (11.0.3 and above).
This support does not include cloud connectors.

To enable TLSv1.3, add to the core-site.xml:
<property>
  <name>hadoop.ssl.enabled.protocols</name>
  <value>TLSv1.3</value>
</property>

Show
Starting with Hadoop 3.3.0, TLS 1.3 is supported on Java 11 Runtime (11.0.3 and above). This support does not include cloud connectors. To enable TLSv1.3, add to the core-site.xml: <property>   <name>hadoop.ssl.enabled.protocols</name>   <value>TLSv1.3</value> </property>

~~HADOOP-16152~~ is going to update Jetty from 9.3 to 9.4.20, which should allow us to support TLS 1.3 https://www.eclipse.org/lists/jetty-users/msg08569.html

We should test and document the support of TLS 1.3. Assuming its support depends on JDK, then it is likely only supported in JDK11 and above.

Dependent

HADOOP-15338 Java 11 runtime support

HADOOP-16152 Upgrade Eclipse Jetty version to 9.4.x

links to

GitHub Pull Request #1880