apache / apache/pulsar-manager
BoringSSL doesn't allow to enable or disable TLSv1.3 ciphers explicitly
- Dominant language
- Vue
- Stars
- 539
- Forks
- 239
- PR merge metrics
- No merged PRs in 30d
Description
```
2024-05-06 07:54:44.268 INFO 11 --- [ scheduling-1] i.n.h.s.ReferenceCountedOpenSslContext : BoringSSL doesn't allow to enable or disable TLSv1.3 ciphers explicitly. Provided TLSv1.3 ciphers: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384', default TLSv1.3 ciphers that will be used: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256'.
```
Contributor guide
Research direction
The report only identifies a BoringSSL TLSv1.3 cipher warning and provides no source file or test. Start by locating the code that emits the ReferenceCountedOpenSslContext message and confirm how cipher configuration is handled; done means the intended TLSv1.3 cipher behavior is defined and verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100