You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by GitBox <gi...@apache.org> on 2023/01/20 08:35:32 UTC

[GitHub] [superset] musicmuthu commented on issue #20960: Connection to Trino using SSL certificate no longer working

musicmuthu commented on issue #20960:
URL: https://github.com/apache/superset/issues/20960#issuecomment-1398068915

   @justineyster  i have tried to connect the trino using certificate connection but it' still point to password authentication.
   
   i tried from both versions superset 2.0.0 and 2.0.1 
   **trino://admin:admin@trino-test.dna.com:30999/dna?verify=/vault/secrets/admin.pem**
   also the ca certificate also placed in ROOT Certificate path
   
   If i try from trino.jar from my linux local machine i'm able to login using certificate but not from superset
   
   my client certificate already there in superset and ca certificate loaded into the superset 
   
   my superset_config for certificate auth changes is below:
   
   from typing import Any, Callable, Dict, List, Optional, Type 
   from trino.auth import Authentication 
   ALLOWED_EXTRA_AUTHENTICATIONS: Dict[str, Dict[str, Callable[..., Any]]] = {
       "trino": {
           "custom_auth": 'certificate'
       },
   }
   SSL_CERT_FILE = "/vault/secrets/adfs.pem /usr/local/lib/python3.8/site-packages/certifi/cacert.pem"
   SSL_CERT_PATH = "/etc/ssl/certs"
   SSL_CERT_DIR = "/usr/local/lib/python3.8/site-packages/certifi"
   
   can you please point out where i did the mistakes.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org