-
Notifications
You must be signed in to change notification settings - Fork 25.6k
Closed
Labels
:Security/TLSSSL/TLS, CertificatesSSL/TLS, Certificates
Description
Java 11 will include support for TLS 1.3.
X-Pack SSL includes specific behaviours around TLS versions including:
- Default values for supported versions
XPackSettings.DEFAULT_SUPPORTED_PROTOCOLS - Configurable version support
SSLConfigurationSettings.supportedProtocols - Mapping those setting strings to TLS algorithm names
SSLService.sslContextAlgorithm
Plus we have tests for the above.
Customers who run on Java 11 may wish to enable TLSv1.3, but we
- will reject it as a value in
sslContextAlgorithmif it comes before TLSv1.2 - don't test it
- don't document how to enable it
Metadata
Metadata
Assignees
Labels
:Security/TLSSSL/TLS, CertificatesSSL/TLS, Certificates