New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 #1915

Closed

jsonwan opened this issue Apr 6, 2023 · 0 comments

Assignees

Labels

done kind/enhancement stage/prod

Collaborator

jsonwan commented Apr 6, 2023 •

edited

Loading

AWS节点不支持SSLv2Hello协议，而Job的代码里可能由于历史原因指定了支持SSLv2Hello，导致部署时job-gateway获取ESB公钥失败。
当前调用的服务已支持更安全的TLS协议，因此老协议可去除。
报错信息：

参考资料：
https://serverfault.com/questions/942633/enabling-sslv2hello-causes-ssl-handshake-failure-against-aws-endpoints

jsonwan added the kind/enhancement label

jsonwan self-assigned this

jsonwan added a commit to jsonwan/bk-job that referenced this issue


          perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 TencentBlueKing#1915

去除对SSLv2Hello与SSLv3协议的支持，使用JDK默认支持的协议

wangyu096 added a commit that referenced this issue


          Merge pull request #1916 from jsonwan/3.6.x

32c1072

perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 #1915

jsonwan added a commit to jsonwan/bk-job that referenced this issue


          perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 TencentBlueKing#1915

33838ba

去除对SSLv2Hello与SSLv3协议的支持，使用JDK默认支持的协议

jsonwan added a commit to jsonwan/bk-job that referenced this issue


          perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 TencentBlueKing#1915

8aab801

去除对SSLv2Hello与SSLv3协议的支持，使用JDK默认支持的协议

jsonwan added a commit that referenced this issue


          Merge pull request #1918 from jsonwan/3.7.x

5a9dead

perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 #1915

jsonwan added a commit that referenced this issue


          Merge pull request #1919 from jsonwan/3.3.x

baf1a1a

perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 #1915

bkjob-bot closed this as completed

bkjob-bot added the stage/prod label

bkjob-bot added the done label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment