Peter, Looks to me Zeppelin today does leverage underlying Jetty's configuration to set
1. SSL/TLS protocol versions 2. Include & Exclude Ciphers The fix is pretty simple, we will send a pull request soon. Thanks, Vinay On Wed, May 25, 2016 at 8:08 AM, Peter Schwarz <pschw...@us.ibm.com> wrote: > Thanks Rohit, I saw that, but the question is specifically about TLSv1.2. > The security scan that inspects all our machines says that the Zeppelin > port (8080) does not support encryption with TLSv1.2. Is there a way to > configure Zeppelin so that it supports this protocol? I have set > zeppelin.ssl to "true", but left client authentication "false". > > Peter > > > [image: Inactive hide details for rohit choudhary ---05/24/2016 09:33:47 > PM---Here's some information - https://github.com/apache/incub]rohit > choudhary ---05/24/2016 09:33:47 PM---Here's some information - > https://github.com/apache/incubator-zeppelin/tree/master/conf. > > From: rohit choudhary <rconl...@gmail.com> > To: users@zeppelin.apache.org > Date: 05/24/2016 09:33 PM > Subject: Re: TLS support > ------------------------------ > > > > Here's some information - > *https://github.com/apache/incubator-zeppelin/tree/master/conf* > <https://github.com/apache/incubator-zeppelin/tree/master/conf>. > > Thanks, > Rohit. > > On Wed, May 25, 2016 at 5:38 AM, Peter Schwarz <*pschw...@us.ibm.com* > <pschw...@us.ibm.com>> wrote: > > Does Zeppelin support TLS, in particular TLSv1.2? If so, how is it > configured? > > Thank you, > Peter Schwarz > > > >