Re: Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-21 Thread Fleming, Jackson
Sent: Wednesday, December 21, 2022 7:26:23 PM To: Fleming, Jackson ; user@cassandra.apache.org Subject: RE: Controlling cipher suites for TLS 1.3 on Cassandra 4 NetApp Security WARNING: This is an external email. Do not click links or open attachments unless you recognize the sender and know

RE: Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-21 Thread Amit Patel via user
sed: cipher_suites: [TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384] Amit From: Fleming, Jackson Sent: 20 December 2022 22:39 To: user@cassandra.apache.org; Amit Patel Subject: Re: Controlling cipher suites for TLS 1.3 on Cassandra 4 CAUT

Re: Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-20 Thread Fleming, Jackson
e those into the containers, so that’d be a configuration nightmare for us. Jackson From: Amit Patel via user Date: Tuesday, 20 December 2022 at 11:59 pm To: user@cassandra.apache.org Subject: RE: Controlling cipher suites for TLS 1.3 on Cassandra 4 NetApp Security WARNING: This is an external email. Do

RE: Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-20 Thread Amit Patel via user
Hi Jackson, I have faced similar issue even if we configure cipher for TLS 1.3 ,I couldn't control cipher, TLS1 and TLS 1.1 was appearing in scan. I had to restrict (secure) at Java security level. -- There are 2 solutions for this: - First would be by configuring the cipher_suites parameter of