You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ambari.apache.org by Tom Beerbower <tb...@hortonworks.com> on 2015/06/20 03:19:58 UTC

Review Request 35681: Add import certificate option to ambari-server setup-security

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35681/
-----------------------------------------------------------

Review request for Ambari, Jonathan Hurley and Robert Levas.

Bugs: AMBARI-12032
https://issues.apache.org/jira/browse/AMBARI-12032

Repository: ambari

Description
-------

Add an option to setup-security to configure truststore and add certificates.
After setting up wire encryption for Hadoop ...
http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.0.9.0/bk_reference/content/ch_wire6.html

The certs from each host should be added to truststore for Ambari. Follow these steps ...

2. 1. Run ambari-server setup-security
2. Select 4 for Import certificate to truststore.
3. Respond y to Do you want to import a certificate into truststore?
4. Enter your TrustStore type. Your options are jks, jceks, or pks12.
5. Enter the path to your TrustStore file.
6. Enter the password for your TrustStore and then re-enter to confirm. The password must be at least 6 characters long. (Note : the last three steps are only required the first time the truststore is configured for Ambari)
7. Enter an alias for the certificate (usually the cert hostname).
8. Enter the path to the server certificate file.
9. Repeat for each cert being added.

Diffs
-----

ambari-server/src/main/python/ambari-server.py 19b7138
ambari-server/src/main/python/ambari_server/setupHttps.py fb0f725
ambari-server/src/test/python/TestAmbariServer.py 4e5d044

Diff: https://reviews.apache.org/r/35681/diff/

Testing
-------

Manual test.

Updated unit tests.

mvn clean test

all pass

[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 45:39 min
[INFO] Finished at: 2015-06-19T20:33:44-04:00
[INFO] Final Memory: 56M/1615M
[INFO] ------------------------------------------------------------------------

Thanks,

Tom Beerbower

Re: Review Request 35681: Add setup truststore & import certificate option to ambari-server setup-security

Posted by Jonathan Hurley <jh...@hortonworks.com>.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35681/#review88677
-----------------------------------------------------------

Ship it!


Ship It!

- Jonathan Hurley


On June 20, 2015, 1:41 p.m., Tom Beerbower wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35681/
> -----------------------------------------------------------
> 
> (Updated June 20, 2015, 1:41 p.m.)
> 
> 
> Review request for Ambari, Jonathan Hurley and Robert Levas.
> 
> 
> Bugs: AMBARI-12032
>     https://issues.apache.org/jira/browse/AMBARI-12032
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Add an option to setup-security to configure truststore and add certificates.
> After setting up wire encryption for Hadoop ...
> http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.0.9.0/bk_reference/content/ch_wire6.html
> 
> The certs from each host should be added to truststore for Ambari. Follow these steps ...
> 
> 1. Run ambari-server setup-security
> 2. Select 4 for Setup truststore.
> 3. Respond y to Do you want to import a certificate into truststore?
> 4. Enter your TrustStore type. Your options are jks, jceks, or pks12.
> 5. Enter the path to your TrustStore file.
> 6. Enter the password for your TrustStore and then re-enter to confirm. The password must be at least 6 characters long.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/python/ambari-server.py 19b7138 
>   ambari-server/src/main/python/ambari_server/setupHttps.py fb0f725 
>   ambari-server/src/test/python/TestAmbariServer.py 4e5d044 
> 
> Diff: https://reviews.apache.org/r/35681/diff/
> 
> 
> Testing
> -------
> 
> Manual test.
> 
> Updated unit tests.
> 
> mvn clean test
> 
> all pass
> 
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 45:39 min
> [INFO] Finished at: 2015-06-19T20:33:44-04:00
> [INFO] Final Memory: 56M/1615M
> [INFO] ------------------------------------------------------------------------
> 
> 
> Thanks,
> 
> Tom Beerbower
> 
>

Re: Review Request 35681: Add setup truststore & import certificate option to ambari-server setup-security

Posted by Tom Beerbower <tb...@hortonworks.com>.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35681/
-----------------------------------------------------------

(Updated June 20, 2015, 5:41 p.m.)


Review request for Ambari, Jonathan Hurley and Robert Levas.


Summary (updated)
-----------------

Add setup truststore & import certificate option to ambari-server setup-security


Bugs: AMBARI-12032
    https://issues.apache.org/jira/browse/AMBARI-12032


Repository: ambari


Description (updated)
-------

Add an option to setup-security to configure truststore and add certificates.
After setting up wire encryption for Hadoop ...
http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.0.9.0/bk_reference/content/ch_wire6.html

The certs from each host should be added to truststore for Ambari. Follow these steps ...

1. Run ambari-server setup-security
2. Select 4 for Setup truststore.
3. Respond y to Do you want to import a certificate into truststore?
4. Enter your TrustStore type. Your options are jks, jceks, or pks12.
5. Enter the path to your TrustStore file.
6. Enter the password for your TrustStore and then re-enter to confirm. The password must be at least 6 characters long.


Diffs
-----

  ambari-server/src/main/python/ambari-server.py 19b7138 
  ambari-server/src/main/python/ambari_server/setupHttps.py fb0f725 
  ambari-server/src/test/python/TestAmbariServer.py 4e5d044 

Diff: https://reviews.apache.org/r/35681/diff/


Testing
-------

Manual test.

Updated unit tests.

mvn clean test

all pass

[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 45:39 min
[INFO] Finished at: 2015-06-19T20:33:44-04:00
[INFO] Final Memory: 56M/1615M
[INFO] ------------------------------------------------------------------------


Thanks,

Tom Beerbower

Re: Review Request 35681: Add import certificate option to ambari-server setup-security

Posted by Robert Levas <rl...@hortonworks.com>.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35681/#review88614
-----------------------------------------------------------

Ship it!


Ship It!

- Robert Levas


On June 19, 2015, 9:19 p.m., Tom Beerbower wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35681/
> -----------------------------------------------------------
> 
> (Updated June 19, 2015, 9:19 p.m.)
> 
> 
> Review request for Ambari, Jonathan Hurley and Robert Levas.
> 
> 
> Bugs: AMBARI-12032
>     https://issues.apache.org/jira/browse/AMBARI-12032
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Add an option to setup-security to configure truststore and add certificates.
> After setting up wire encryption for Hadoop ...
> http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.0.9.0/bk_reference/content/ch_wire6.html
> 
> The certs from each host should be added to truststore for Ambari. Follow these steps ...
> 
> 2. 1. Run ambari-server setup-security
> 2. Select 4 for Import certificate to truststore.
> 3. Respond y to Do you want to import a certificate into truststore?
> 4. Enter your TrustStore type. Your options are jks, jceks, or pks12.
> 5. Enter the path to your TrustStore file.
> 6. Enter the password for your TrustStore and then re-enter to confirm. The password must be at least 6 characters long. (Note : the last three steps are only required the first time the truststore is configured for Ambari)
> 7. Enter an alias for the certificate (usually the cert hostname).
> 8. Enter the path to the server certificate file.
> 9. Repeat for each cert being added.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/python/ambari-server.py 19b7138 
>   ambari-server/src/main/python/ambari_server/setupHttps.py fb0f725 
>   ambari-server/src/test/python/TestAmbariServer.py 4e5d044 
> 
> Diff: https://reviews.apache.org/r/35681/diff/
> 
> 
> Testing
> -------
> 
> Manual test.
> 
> Updated unit tests.
> 
> mvn clean test
> 
> all pass
> 
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 45:39 min
> [INFO] Finished at: 2015-06-19T20:33:44-04:00
> [INFO] Final Memory: 56M/1615M
> [INFO] ------------------------------------------------------------------------
> 
> 
> Thanks,
> 
> Tom Beerbower
> 
>

Re: Review Request 35681: Add import certificate option to ambari-server setup-security

Posted by Mahadev Konar <ma...@apache.org>.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35681/#review88652
-----------------------------------------------------------

Ship it!


Ship It!

- Mahadev Konar


On June 20, 2015, 1:19 a.m., Tom Beerbower wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35681/
> -----------------------------------------------------------
> 
> (Updated June 20, 2015, 1:19 a.m.)
> 
> 
> Review request for Ambari, Jonathan Hurley and Robert Levas.
> 
> 
> Bugs: AMBARI-12032
>     https://issues.apache.org/jira/browse/AMBARI-12032
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Add an option to setup-security to configure truststore and add certificates.
> After setting up wire encryption for Hadoop ...
> http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.0.9.0/bk_reference/content/ch_wire6.html
> 
> The certs from each host should be added to truststore for Ambari. Follow these steps ...
> 
> 2. 1. Run ambari-server setup-security
> 2. Select 4 for Import certificate to truststore.
> 3. Respond y to Do you want to import a certificate into truststore?
> 4. Enter your TrustStore type. Your options are jks, jceks, or pks12.
> 5. Enter the path to your TrustStore file.
> 6. Enter the password for your TrustStore and then re-enter to confirm. The password must be at least 6 characters long. (Note : the last three steps are only required the first time the truststore is configured for Ambari)
> 7. Enter an alias for the certificate (usually the cert hostname).
> 8. Enter the path to the server certificate file.
> 9. Repeat for each cert being added.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/python/ambari-server.py 19b7138 
>   ambari-server/src/main/python/ambari_server/setupHttps.py fb0f725 
>   ambari-server/src/test/python/TestAmbariServer.py 4e5d044 
> 
> Diff: https://reviews.apache.org/r/35681/diff/
> 
> 
> Testing
> -------
> 
> Manual test.
> 
> Updated unit tests.
> 
> mvn clean test
> 
> all pass
> 
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 45:39 min
> [INFO] Finished at: 2015-06-19T20:33:44-04:00
> [INFO] Final Memory: 56M/1615M
> [INFO] ------------------------------------------------------------------------
> 
> 
> Thanks,
> 
> Tom Beerbower
> 
>