From edd693833b468623562c1b1085f79cbafbee9f15 Mon Sep 17 00:00:00 2001
From: John Zhuge <jzhuge@cloudera.com>
Date: Thu, 20 Apr 2017 21:22:06 -0700
Subject: [PATCH] HADOOP-14340. Enable KMS and HttpFS to exclude SSL ciphers.
 Contributed by John Zhuge.

---
 .../src/main/java/org/apache/hadoop/http/HttpServer2.java        | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer2.java b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer2.java
index bd10f93c80..cbabb33fe3 100644
--- a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer2.java
+++ b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/http/HttpServer2.java
@@ -384,6 +384,7 @@ private void loadSSLConfiguration() throws IOException {
           getPassword(sslConf, SSLFactory.SSL_SERVER_TRUSTSTORE_PASSWORD),
           sslConf.get(SSLFactory.SSL_SERVER_TRUSTSTORE_TYPE,
               SSLFactory.SSL_SERVER_TRUSTSTORE_TYPE_DEFAULT));
+      excludeCiphers(sslConf.get(SSLFactory.SSL_SERVER_EXCLUDE_CIPHER_LIST));
     }
 
     public HttpServer2 build() throws IOException {