fabric8io / openshift-elasticsearch-plugin

Apache License 2.0
27 stars 21 forks source link

add use of openssl for keystore #121

Closed jcantrill closed 6 years ago

jcantrill commented 6 years ago

Add openssl dependent libraries

richm commented 6 years ago

Why do we need this? We can't use the native Java SSL implementation because . . .?

jcantrill commented 6 years ago

Only reason I can offer:

Using OpenSSL will result in better performance and better support for strong and modern cipher suites when compared JCE

And seems to be preferred by SG though I dont know that to be a compelling reason to change other reason provided by simo

<simo> jcantril: another thing about the story is that openssl is fips compliant, not sure if java's ssl is, and we prefer fips compliant code

though i dont know if it is pressing

ewolinetz commented 6 years ago

Is it that simple for enabling ssl for SG? LGTM