org.apache.hadoop.hbase.http

Class SslSocketConnectorSecure

java.lang.Object

SslSocketConnector

org.apache.hadoop.hbase.http.SslSocketConnectorSecure

public class SslSocketConnectorSecure
extends SslSocketConnector

This subclass of the Jetty SslSocketConnector exists solely to control the TLS protocol versions allowed. This is fallout from the POODLE vulnerability (CVE-2014-3566), which requires that SSLv3 be disabled. Only TLS 1.0 and later protocols are allowed.

Constructor Summary

Constructors

Constructor and Description
SslSocketConnectorSecure()

Method Summary

Modifier and Type	Method and Description
protected ServerSocket	newServerSocket(String host, int port, int backlog) Create a new ServerSocket that will not accept SSLv3 connections, but will accept TLSv1.x connections.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SslSocketConnectorSecure

public SslSocketConnectorSecure()

Method Detail

newServerSocket

protected ServerSocket newServerSocket(String host,
                                       int port,
                                       int backlog)
                                throws IOException

Create a new ServerSocket that will not accept SSLv3 connections, but will accept TLSv1.x connections.

Throws:

IOException