有关于cassandra和fips支持的问题。
对于节间加密,使用的密码套件是dhe/ecdhe密码,这应该是好的。在cassandra.yaml中,在“启用或禁用节点间加密”下有以下注解,应该足够好,但进一步查看以下链接不起作用-https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/fips.html
# Enable or disable inter-node encryption
# JVM defaults for supported SSL socket protocols and cipher suites can
# be replaced using custom encryption options. This is not recommended
# unless you have policies in place that dictate certain settings, or
# need to disable vulnerable ciphers or protocols in case the JVM cannot
# be updated.
# FIPS compliant settings can be configured at JVM level and should not
# involve changing encryption settings here:
# https://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/FIPS.html
这方面的任何指示或细节都会有所帮助。谢谢!
暂无答案!
目前还没有任何答案,快来回答吧!