From 66d2e9c2f7d080df66c5e0734c0548fa9c04d604 Mon Sep 17 00:00:00 2001 From: Rafal Leszko Date: Mon, 17 Sep 2018 17:18:12 +0200 Subject: [PATCH 1/2] Use specific "TLSv1.2" instead of "TLS" --- .../java/com/hazelcast/kubernetes/DefaultKubernetesClient.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/java/com/hazelcast/kubernetes/DefaultKubernetesClient.java b/src/main/java/com/hazelcast/kubernetes/DefaultKubernetesClient.java index a95d137..3f757ef 100644 --- a/src/main/java/com/hazelcast/kubernetes/DefaultKubernetesClient.java +++ b/src/main/java/com/hazelcast/kubernetes/DefaultKubernetesClient.java @@ -196,7 +196,7 @@ private static SSLSocketFactory buildSslSocketFactory() { TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm()); tmf.init(keyStore); - SSLContext context = SSLContext.getInstance("TLS"); + SSLContext context = SSLContext.getInstance("TLSv1.2"); context.init(null, tmf.getTrustManagers(), null); return context.getSocketFactory(); From 01fd6e398bb02dd242e3cf644e7a5752cd71cdf7 Mon Sep 17 00:00:00 2001 From: Rafal Leszko Date: Thu, 20 Sep 2018 14:50:33 +0200 Subject: [PATCH 2/2] Add info that JRE must support TLS 1.2 --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 2adab2b..9178a3d 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,8 @@ To use Hazelcast embedded in your application, you need to add the plugin depend ***NOTE:*** If you also have the direct dependency to `hazelcast` specified, then please note that hazelcast-kubernetes 1.3+ is compatible with hazelcast 3.11+ and for older hazelcast verions you need to use hazelcast-kubernetes 1.2. +***NOTE:*** Your Java Runtime Environment must support TLS 1.2 (which is the case for most modern JREs). + #### Maven ```xml