Skip to content

Draft: Add TLS protocol configuration for OTLP HTTP exporters#8638

Closed
ZapolyarnyDev wants to merge 1 commit into
open-telemetry:mainfrom
ZapolyarnyDev:feat/otlp-enabled-tls-protocols
Closed

Draft: Add TLS protocol configuration for OTLP HTTP exporters#8638
ZapolyarnyDev wants to merge 1 commit into
open-telemetry:mainfrom
ZapolyarnyDev:feat/otlp-enabled-tls-protocols

Conversation

@ZapolyarnyDev

Copy link
Copy Markdown

Relates to #7573

Summary

This draft adds setEnabledProtocols(List<String>) to OTLP HTTP exporter builders.

The configured protocols are passed to HTTP senders:

  • OkHttp uses them to configure its ConnectionSpec.
  • JDK HTTP client applies them through SSLParameters

When unset, existing TLS behavior remains unchanged

Motivation

Some environments require enabling TLS protocols that are not part of OkHttp's default MODERN_TLS configuration. This provides an explicit opt-in without changing defaults.

Security

No legacy protocols are enabled by default. Users must explicitly configure the protocols they want to allow.

Open questions

This draft currently covers HTTP senders only. Feedback is welcome on:

  • whether this API is the right abstraction
  • whether gRPC senders should share the same configuration

@linux-foundation-easycla

linux-foundation-easycla Bot commented Jul 17, 2026

Copy link
Copy Markdown

CLA Signed
The committers listed above are authorized under a signed CLA.

  • ✅ login: ZapolyarnyDev / name: Zapolyarny (27af04d)

@ZapolyarnyDev

Copy link
Copy Markdown
Author

Closing as a duplicate of #8610. I opened this draft before noticing the existing implementation. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant