[jira] [Comment Edited] (RANGER-2907) Ranger Plugin is not using default TrustManager if a trustmanager is not specified in ranger-policymgr-ssl.xml

["Selvamohan Neethiraj (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RANGER-2907?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17164008#comment-17164008 ] 

Selvamohan Neethiraj edited comment on RANGER-2907 at 7/23/20, 11:11 PM:
-------------------------------------------------------------------------

Thanks [~pradeep]. I reviewed your patch; I see that we can achieve the same thing by getting the default TrustManagerFactory (see the modified v1 patch) -  [^0001-RANGER-2907-adding-default-trust-manager-from-JVM-if.patch] . 
Please review and provide your feedback.
cc:  [~vel] [~madhan@apache.org] 


was (Author: sneethiraj):
Thanks [~pradeep]. I reviewed your patch; I see that we can achieve the same thing by getting the default TrustManagerFactory (see the modified v1 patch). 
Please review and provide your feedback.
cc:  [~vel] [~madhan@apache.org] 

> Ranger Plugin is not using default TrustManager if a trustmanager is not specified in ranger-policymgr-ssl.xml
> --------------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-2907
>                 URL: https://issues.apache.org/jira/browse/RANGER-2907
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 2.0.0
>            Reporter: Selvamohan Neethiraj
>            Assignee: Selvamohan Neethiraj
>            Priority: Critical
>         Attachments: 0001-RANGER-2907-Ranger-Plugin-is-not-using-default-Trust.patch, 0001-RANGER-2907-adding-default-trust-manager-from-JVM-if.patch
>
>
> When a CA certified certificate is used by Ranger Admin, the RangerPlugin should be able to use the default cacerts (from JVM) without having to configure it manually.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)