Improvements for encrypted client connection handling (preview feature)

Detail name	Value
Changelog Number	14526
Type	New Feature
Status	Resolved
Fix Versions	Exasol 8.0.0, Exasol 7.1.8
Resolution Date	2022-03-24

New Preview Feature

Added support for TLS 1.3.

We now allow specifying a list of allowed ciphers. These can be specified with the two new DB-parameters
-tls12CipherList: List of ciphers TLS 1.2 may use. (default: 'HIGH:-SSLv2:-SSLv3:-TLSv1:-eNULL:-aNULL:-3DES:-SHA1')
-tls13CipherList: List of ciphers TLS 1.3 may use. (default: '', allowing all TLS 1.3 ciphers)

The cipher list format is described here: https://www.openssl.org/docs/man1.1.1/man1/ciphers.html.

Changing the cipher list parameters could result in clients not being able to connect to Exasol anymore. Please test all configuration changes carefully.

Usage

To enable this preview feature, please set the following parameter to 'false'.

-useLegacyTlsMethod: If true, the legacy TLS method is used. (default: true)