Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-22 Thread Николай Ижиков
Hello, Rajini. PR - https://github.com/apache/kafka/pull/7998 Please, review. > 22 янв. 2020 г., в 14:28, Николай Ижиков написал(а): > > Yes, I will do it the next few hours. > >> 22 янв. 2020 г., в 14:24, Rajini Sivaram >> написал(а): >> >> Hi Nikolay, >> >> Do you have time to submit a P

Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-22 Thread Николай Ижиков
Yes, I will do it the next few hours. > 22 янв. 2020 г., в 14:24, Rajini Sivaram написал(а): > > Hi Nikolay, > > Do you have time to submit a PR for this before 2.5.0 feature freeze on Jan > 29th? > > On Tue, Jan 21, 2020 at 1:09 PM Ron Dagostino wrote: > >> Sure, go for it. >> >>> On Jan 2

Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-22 Thread Rajini Sivaram
Hi Nikolay, Do you have time to submit a PR for this before 2.5.0 feature freeze on Jan 29th? On Tue, Jan 21, 2020 at 1:09 PM Ron Dagostino wrote: > Sure, go for it. > > > On Jan 21, 2020, at 8:05 AM, Николай Ижиков wrote: > > > > Hello, Ron. > > > > Let’s start vote right now. > > What do you

Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-21 Thread Ron Dagostino
Sure, go for it. > On Jan 21, 2020, at 8:05 AM, Николай Ижиков wrote: > > Hello, Ron. > > Let’s start vote right now. > What do you think? > >> 21 янв. 2020 г., в 15:48, Ron Dagostino написал(а): >> >> LGTM. The KIP freeze for 2.5 is officially upon us tomorrow, but hopefully >> this is su

Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-21 Thread Николай Ижиков
Hello, Ron. Let’s start vote right now. What do you think? > 21 янв. 2020 г., в 15:48, Ron Dagostino написал(а): > > LGTM. The KIP freeze for 2.5 is officially upon us tomorrow, but hopefully > this is such a simple and straightforward change with obvious security > benefits that it can be a

Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-21 Thread Ron Dagostino
LGTM. The KIP freeze for 2.5 is officially upon us tomorrow, but hopefully this is such a simple and straightforward change with obvious security benefits that it can be added anyway. I would put it up for a vote very quickly — tomorrow at the latest. Ron > On Jan 21, 2020, at 7:38 AM, Никол

Re: [DISCUSS] KIP-553: Disable all SSL protocols except TLSV1.2 by default.

2020-01-21 Thread Николай Ижиков
Hello. KIP [1] updated. Only TLSv1.2 will be enabled by default, as Rajini suggested. Any objections to it? https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=142641956 > 17 янв. 2020 г., в 14:56, Николай Ижиков написал(а): > > Thanks, Rajini. > > Will do it, shortly. > >> 17