[ROCKETMQ-315] Enhance TLS default settings

Author: shutian.lzh <shutian.lzh@alibaba-inc.com>

Closes #194 from lizhanhui/tls_enhance_defaults.
This commit is contained in:
shutian.lzh
2017-12-01 19:52:30 +08:00
committed by yukon
parent 4926187364
commit 5a2e710987
2 changed files with 2 additions and 2 deletions
@@ -98,7 +98,7 @@ public class BrokerStartup {
final BrokerConfig brokerConfig = new BrokerConfig();
final NettyServerConfig nettyServerConfig = new NettyServerConfig();
final NettyClientConfig nettyClientConfig = new NettyClientConfig();
nettyClientConfig.setUseTLS(NettySystemConfig.sslMode != SslMode.DISABLED);
nettyClientConfig.setUseTLS(NettySystemConfig.sslMode == SslMode.ENFORCING);
nettyServerConfig.setListenPort(10911);
final MessageStoreConfig messageStoreConfig = new MessageStoreConfig();
@@ -57,7 +57,7 @@ public class NettySystemConfig {
* </ol>
*/
public static SslMode sslMode = //
SslMode.parse(System.getProperty(ORG_APACHE_ROCKETMQ_REMOTING_SSL_MODE, "disabled"));
SslMode.parse(System.getProperty(ORG_APACHE_ROCKETMQ_REMOTING_SSL_MODE, "permissive"));
public static String sslConfigFile = //
System.getProperty(ORG_APACHE_ROCKETMQ_REMOTING_SSL_CONFIG_FILE, "/etc/rocketmq/ssl.properties");