Skip to content

Commit

Permalink
(chore) Disable ssl connection to FE by default for compatibility reason
Browse files Browse the repository at this point in the history
Older MySQL client (< 5.7.28) will try to connect to server with tls1.1,
which is insecure and is not supported by Doris FE. The connection will
fail.

We disable ssl connection support on Doris FE to keep the users' application
unaffected. To enable ssl support explicitly, just put
the following to fe.conf
```
enable_ssl = true
```
  • Loading branch information
gavinchou committed Jun 17, 2023
1 parent cc3f9ed commit 892b80c
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -1829,7 +1829,7 @@ public class Config extends ConfigBase {
* If set to ture, doris will establish an encrypted channel based on the SSL protocol with mysql.
*/
@ConfField(mutable = false, masterOnly = false, expType = ExperimentalType.EXPERIMENTAL)
public static boolean enable_ssl = true;
public static boolean enable_ssl = false;

/**
* If set to ture, ssl connection needs to authenticate client's certificate.
Expand Down

0 comments on commit 892b80c

Please sign in to comment.