Improve security level for client/server encryption

Details

Detail name Value
Changelog Number 241
Type Improvement
Status Resolved
Fix Versions EXASOL 6.0.0
Resolution Date 2017-03-16

The current encryption algorithm will be replaced with ChaCha20 (RFC 7539), and all drivers and EXAplus will have encryption enabled by default.

LOCAL CSV IMPORT/EXPORT will always use encryption, if the session executing this command is encrypted.

Note: Due to a bug in Java 1.7.0_111 encryption in LOCAL CSV IMPORT/EXPORT is not working with this java version.

Changed behavior

All drivers and EXAplus will have encryption enabled by default. The encryption for client server communication was improved and the database no longer supports RC4. Therefore you need to use new drivers (from EXASOL 6.0) if encryption is enabled. LOCAL CSV IMPORT/EXPORT will always use encryption, if the session executing this command is encrypted.