Improve security level for client/server encryption
Details
| Detail name | Value |
|---|---|
| Changelog Number | 241 |
| Type | Improvement |
| Status | Resolved |
| Fix Versions | EXASOL 6.0.0 |
| Resolution Date | 2017-03-16 |
The current encryption algorithm will be replaced with ChaCha20 (RFC 7539), and all drivers and EXAplus will have encryption enabled by default.
LOCAL CSV IMPORT/EXPORT will always use encryption, if the session executing this command is encrypted.
Note: Due to a bug in Java 1.7.0_111 encryption in LOCAL CSV IMPORT/EXPORT is not working with this java version.
Changed behavior
All drivers and EXAplus will have encryption enabled by default. The encryption for client server communication was improved and the database no longer supports RC4. Therefore you need to use new drivers (from EXASOL 6.0) if encryption is enabled. LOCAL CSV IMPORT/EXPORT will always use encryption, if the session executing this command is encrypted.