You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@kudu.apache.org by "Todd Lipcon (Code Review)" <ge...@cloudera.org> on 2017/02/10 02:01:11 UTC
[kudu-CR] java: add TLS support
Hello Dan Burkert, Jean-Daniel Cryans, Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/5949
to look at the new patch set (#3).
Change subject: java: add TLS support
......................................................................
java: add TLS support
This adds support for negotiating and speaking TLS in the Java client.
Testing is a bit light here, because the code on the C++ side to
generate and sign self-signed certs is still in flight, but once it's
committed, all of our integration tests should cover this code. I also
did write one unit test for the TLS handshake in particular.
I did test this against a local cluster by running kudu-ts against a
tserver and master compiled with the latest in-flight C++ patches to
generate self-signed certs. I verified with tshark that the traffic is
encrypted whereas I could read it before.
Change-Id: I9b095ccac908f391e683ec4ef433bae52d659a21
---
M java/kudu-client/src/main/java/org/apache/kudu/client/Negotiator.java
M java/kudu-client/src/main/java/org/apache/kudu/util/SecurityUtil.java
M java/kudu-client/src/test/java/org/apache/kudu/client/TestNegotiator.java
3 files changed, 348 insertions(+), 23 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/49/5949/3
--
To view, visit http://gerrit.cloudera.org:8080/5949
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I9b095ccac908f391e683ec4ef433bae52d659a21
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Todd Lipcon <to...@apache.org>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Jean-Daniel Cryans <jd...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>