You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2019/04/19 15:17:00 UTC

[jira] [Commented] (IMPALA-8407) Warn when Impala shell fails to connect due to tlsv1.2

    [ https://issues.apache.org/jira/browse/IMPALA-8407?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16821987#comment-16821987 ] 

ASF subversion and git services commented on IMPALA-8407:
---------------------------------------------------------

Commit 10b9195035a7a8f948c378a09b357deb549c8285 in impala's branch refs/heads/master from Thomas Tauber-Marshall
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=10b9195 ]

IMPALA-8407: Warn when Impala shell fails to connect due to tlsv1.2

When impala-shell is used to connect to an impala cluster with
--ssl_minimum_version=tlsv1.2, if the Python version being used is
< 2.7.9 the connection will fail due to a limitation of TSSLSocket.
See IMPALA-6990 for more details.

Currently, when this occurs, the error that gets printed is "EOF
occurred in violation of protocol", which is not very helpful. This
patch detect this situation and prints a more informative warning.

Testing:
- Updated test_tls_v12 so that instead of being skipped on affected
  platforms, it runs and checks for the presence of the warning.

Change-Id: I3feddaccb9be3a15220ce9e59aa7ed41d41b8ab6
Reviewed-on: http://gerrit.cloudera.org:8080/13003
Reviewed-by: Thomas Marshall <tm...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>


> Warn when Impala shell fails to connect due to tlsv1.2
> ------------------------------------------------------
>
>                 Key: IMPALA-8407
>                 URL: https://issues.apache.org/jira/browse/IMPALA-8407
>             Project: IMPALA
>          Issue Type: Improvement
>    Affects Versions: Impala 3.3.0
>            Reporter: Thomas Tauber-Marshall
>            Priority: Major
>
> When impala-shell is used to connect to an impala cluster with --ssl_minimum_version=tlsv1.2, if the Python version being used is < 2.7.9 the connection will fail due to a limitation of TSSLSocket. See IMPALA-6990 for more details
> Currently, when this occurs, the error that gets printed is "EOF occurred in violation of protocol", which is not very helpful. We should detect this situation and print a more informative warning



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org