Update protocol for MemcachedCache (apache#16035)

monetate · Mar 7, 2024 · bf39c71 · bf39c71
1 parent 564c44e
commit bf39c71
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/server/src/main/java/org/apache/druid/client/cache/MemcachedCache.java b/server/src/main/java/org/apache/druid/client/cache/MemcachedCache.java
@@ -413,7 +413,7 @@ public static ConnectionFactory createConnectionFactory(final MemcachedCacheConf
       // Build SSLContext
       TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
       tmf.init((KeyStore) null);
-      SSLContext sslContext = SSLContext.getInstance("TLS");
+      SSLContext sslContext = SSLContext.getInstance("TLSv1.2");
       sslContext.init(null, tmf.getTrustManagers(), null);
       // Create the client in TLS mode
       connectionFactoryBuilder.setSSLContext(sslContext);

diff --git a/server/src/test/java/org/apache/druid/client/cache/MemcachedCacheTest.java b/server/src/test/java/org/apache/druid/client/cache/MemcachedCacheTest.java
@@ -254,6 +254,8 @@ public String getHosts()
     Assert.assertEquals(connectionFactoryDynamic.getClientMode(), ClientMode.Dynamic);
     //enableTls is true so sslContext is not null
     Assert.assertNotNull(connectionFactoryDynamic.getSSLContext());
+    // Ensure Protocol is TLSv1.2
+    Assert.assertEquals("TLSv1.2", connectionFactoryDynamic.getSSLContext().getProtocol());
   }
 
   @Test