[GitHub] keith-turner commented on issue #646: Do not require a password on the truststore JKS

[GitBox <gi...@apache.org>]

keith-turner commented on issue #646: Do not require a password on the truststore JKS
URL: https://github.com/apache/accumulo/pull/646#issuecomment-420808955
 
 
   I was lurking around in the Accumulo monitor code and Jetty code to understand this.  One thing I noticed in the Jetty code is that if the truststore is not set, then it will use the keystore as the truststore.  So one possible option is we require both truststore path and password are set OR no truststore props are set.  When nothing is set for the truststore, then we don't set anything on Jetty's SslConnectionFactory for truststore and it falls back to the keystore.
   
   I think an issue needs to be opened about the monitor falling back to http if https config is present but incorrect.  The monitor should probably fail to start.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services