[jira] [Commented] (THRIFT-1867) Python client/server should support client-side certificates.

["Ryan McGuire (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/THRIFT-1867?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13589232#comment-13589232 ] 

Ryan McGuire commented on THRIFT-1867:
--------------------------------------

I've tested the client portion of this patch against [Cassandra's support for SSL authentication|https://issues.apache.org/jira/browse/CASSANDRA-5120]. I modified the unit test to use the client validation, but I'm not very familiar with the test framework, I commented out a set_alarm() in TestServer.py as it always terminated the server when using ssl. I also had to remove the test_cert.pem and replace it with my own that was signed by a CA so that the certificate could be verified, not sure if that introduces problems with other tests?
                
> Python client/server should support client-side certificates.
> -------------------------------------------------------------
>
>                 Key: THRIFT-1867
>                 URL: https://issues.apache.org/jira/browse/THRIFT-1867
>             Project: Thrift
>          Issue Type: Improvement
>          Components: Python - Library
>            Reporter: Ryan McGuire
>             Fix For: 1.0
>
>         Attachments: thrift-1867-python-client-certificates.patch
>
>
> The Python TSSLSocket is currently missing support for client side certificates. The client should be able to supply them and the server should be able to validate them.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira