Ambari Agent ignores Ambari server ssl cert by default ?

[Di Li <os...@gmail.com>]

Hello folks

I am trying to understand how Ambari agent handles the self-sign ssl cert
generated by the Ambari server during default installation.

Ambari agent security.py has this code here that sets
"cert_reqs=ssl.CERT_NONE"
>>> self.sock = ssl.wrap_socket(sock, cert_reqs=ssl.CERT_NONE)

Doesn't this mean Ambari Agent ignores Ambari server ssl cert unless
customers manually setup two-way ssl authentication ?  How does Ambari
Agent use the self-sign cert ( it looks like to me that it doesn';t use it
at all) ?



Thank you.

Di Li