You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by GitBox <gi...@apache.org> on 2020/07/22 07:40:56 UTC
[GitHub] [hadoop-ozone] xiaoyuyao opened a new pull request #1235: HDDS-3997. Ozone certificate needs additional flags and SAN extension…
xiaoyuyao opened a new pull request #1235:
URL: https://github.com/apache/hadoop-ozone/pull/1235
… for GRPC TLS.
## What changes were proposed in this pull request?
Adding SAN extension for SCM issued certificate and add DN certificate with sign/encrypt flag to meet requirement of SSL handshake with GRPC/Netty.
## What is the link to the Apache JIRA
https://issues.apache.org/jira/browse/HDDS-3997
## How was this patch tested?
Test with real cluster before patch HDDS-3996 and HDDS-3997. Certificate does not have the required extension and flag, which fail the SSL handshake for Ratis operations like addGroup, leader election when ozone.grpc.tls.enabled is true.
After the patch, verified the RATIS-Three pipeline can be created successfuly without SSL error.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: ozone-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: ozone-issues-help@hadoop.apache.org
[GitHub] [hadoop-ozone] xiaoyuyao commented on pull request #1235: HDDS-3997. Ozone certificate needs additional flags and SAN extension…
Posted by GitBox <gi...@apache.org>.
xiaoyuyao commented on pull request #1235:
URL: https://github.com/apache/hadoop-ozone/pull/1235#issuecomment-663779372
Thanks @jnp for the review. I will merge the PR shortly.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: ozone-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: ozone-issues-help@hadoop.apache.org
[GitHub] [hadoop-ozone] xiaoyuyao merged pull request #1235: HDDS-3997. Ozone certificate needs additional flags and SAN extension…
Posted by GitBox <gi...@apache.org>.
xiaoyuyao merged pull request #1235:
URL: https://github.com/apache/hadoop-ozone/pull/1235
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: ozone-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: ozone-issues-help@hadoop.apache.org
[GitHub] [hadoop-ozone] jnp commented on pull request #1235: HDDS-3997. Ozone certificate needs additional flags and SAN extension…
Posted by GitBox <gi...@apache.org>.
jnp commented on pull request #1235:
URL: https://github.com/apache/hadoop-ozone/pull/1235#issuecomment-663603229
+1 for the patch.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: ozone-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: ozone-issues-help@hadoop.apache.org