Peter,

Looks to me Zeppelin today does leverage underlying Jetty's configuration
to set

   1. SSL/TLS protocol versions
   2. Include & Exclude Ciphers

The fix is pretty simple, we will send a pull request soon.

Thanks,
Vinay




On Wed, May 25, 2016 at 8:08 AM, Peter Schwarz <pschw...@us.ibm.com> wrote:

> Thanks Rohit, I saw that, but the question is specifically about TLSv1.2.
> The security scan that inspects all our machines says that the Zeppelin
> port (8080) does not support encryption with TLSv1.2. Is there a way to
> configure Zeppelin so that it supports this protocol? I have set
> zeppelin.ssl to "true", but left client authentication "false".
>
> Peter
>
>
> [image: Inactive hide details for rohit choudhary ---05/24/2016 09:33:47
> PM---Here's some information - https://github.com/apache/incub]rohit
> choudhary ---05/24/2016 09:33:47 PM---Here's some information -
> https://github.com/apache/incubator-zeppelin/tree/master/conf.
>
> From: rohit choudhary <rconl...@gmail.com>
> To: users@zeppelin.apache.org
> Date: 05/24/2016 09:33 PM
> Subject: Re: TLS support
> ------------------------------
>
>
>
> Here's some information -
> *https://github.com/apache/incubator-zeppelin/tree/master/conf*
> <https://github.com/apache/incubator-zeppelin/tree/master/conf>.
>
> Thanks,
> Rohit.
>
> On Wed, May 25, 2016 at 5:38 AM, Peter Schwarz <*pschw...@us.ibm.com*
> <pschw...@us.ibm.com>> wrote:
>
>    Does Zeppelin support TLS, in particular TLSv1.2? If so, how is it
>    configured?
>
>    Thank you,
>    Peter Schwarz
>
>
>
>

Reply via email to