apache / apache/pulsar-manager

BoringSSL doesn't allow to enable or disable TLSv1.3 ciphers explicitly

Open
#568 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Vue
Stars
539
Forks
239
PR merge metrics
No merged PRs in 30d

Description

```
2024-05-06 07:54:44.268 INFO 11 --- [ scheduling-1] i.n.h.s.ReferenceCountedOpenSslContext : BoringSSL doesn't allow to enable or disable TLSv1.3 ciphers explicitly. Provided TLSv1.3 ciphers: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384', default TLSv1.3 ciphers that will be used: 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256'.
```

Contributor guide

Open the contributing guide

Research direction

The report only identifies a BoringSSL TLSv1.3 cipher warning and provides no source file or test. Start by locating the code that emits the ReferenceCountedOpenSslContext message and confirm how cipher configuration is handled; done means the intended TLSv1.3 cipher behavior is defined and verified.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.