RE: Java 1.8 and TLSv1.3

2023-11-07 Thread Andreas Martens1
see any way to specify, across JRE implementations, “allow both TLS 1.2 and 1.3”. Thanks Andreas From: Edoardo Comar Date: Monday, 6 November 2023 at 12:43 To: users@kafka.apache.org Cc: d...@kafka.apache.org Subject: [EXTERNAL] Re: Java 1.8 and TLSv1.3 Hi Andreas, I just tried running a Kafka

Re: Java 1.8 and TLSv1.3

2023-11-06 Thread Edoardo Comar
onsoleConsumer.scala:77) > at kafka.tools.ConsoleConsumer$.main(ConsoleConsumer.scala:54) > at kafka.tools.ConsoleConsumer.main(ConsoleConsumer.scala) > > If I change the test in SslConfigs.java to test for presence of the TPSv1.3 > protocol rather than testing for Java

RE: Java 1.8 and TLSv1.3

2023-11-06 Thread Andreas Martens1
ka.apache.org Cc: d...@kafka.apache.org Subject: [EXTERNAL] Re: Java 1.8 and TLSv1.3 Andreas, do you mean that even if you configure your Java client running on Java8 with ssl.enabled.protocols=TLSv1.3 you can't connect to a Kafka broker using TLS1.3 ? On Sat, 28 Oct 2023 at 01:03, Ismael Ju

Re: Java 1.8 and TLSv1.3

2023-11-03 Thread Edoardo Comar
Andreas, do you mean that even if you configure your Java client running on Java8 with ssl.enabled.protocols=TLSv1.3 you can't connect to a Kafka broker using TLS1.3 ? On Sat, 28 Oct 2023 at 01:03, Ismael Juma wrote: > > Hi Andreas, > > The TLS code has run into changes in behavior across differ

Re: Java 1.8 and TLSv1.3

2023-10-27 Thread Ismael Juma
Hi Andreas, The TLS code has run into changes in behavior across different Java versions, so we only wanted to allow TLS 1.3 in the versions we tested against. TLS 1.3 landed in Java 8 a while after we made the relevant changes for Java 11 and newer. That said, Java 8 support is deprecated and wil

Java 1.8 and TLSv1.3

2023-10-26 Thread Andreas Martens1
Hello good people of Kafka, I was recently informed that TLS 1.3 doesn’t work for connecting our product to Kafka, and after some digging realised it was true, no matter how hard I type “TLSv1.3” it doesn’t work, weirdly with an error about no applicable Ciphers. So after a bunch more digging I