You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Srimanth Gunturi (JIRA)" <ji...@apache.org> on 2015/02/17 22:08:11 UTC
[jira] [Resolved] (AMBARI-9556) Knox installation does not create
correct gateway-identity cert
[ https://issues.apache.org/jira/browse/AMBARI-9556?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Srimanth Gunturi resolved AMBARI-9556.
--------------------------------------
Resolution: Fixed
Committed to trunk.
> Knox installation does not create correct gateway-identity cert
> ---------------------------------------------------------------
>
> Key: AMBARI-9556
> URL: https://issues.apache.org/jira/browse/AMBARI-9556
> Project: Ambari
> Issue Type: Bug
> Components: stacks
> Affects Versions: 2.0.0
> Reporter: Sumit Gupta
> Assignee: Sumit Gupta
> Fix For: 2.0.0
>
> Attachments: AMBARI-9556.patch
>
>
> During startup of knox (after install), a cert file is generated using the knoxcli tool and passing in the hostname that knox is on. There is a check for this generation to occur if it hasn't been done before. The check is for the existance of the gateway cert store file. This is done correctly in Ambari 1.7 but the check in 2.x is now against the wrong file. This results in the command never getting executed and the knox server creating a default cert on startup which has 'localhost' in it as the CN instead of the actual hostname.
> This commit shows where the correct check is lost.
> https://git-wip-us.apache.org/repos/asf?p=ambari.git;a=blobdiff;f=ambari-server/src/main/resources/stacks/HDP/2.2/services/KNOX/package/scripts/knox.py;h=7d7d20cc53df4866cfb5bb90171998edcfbcc549;hp=627462ae06a321248085d4d6e6428a780a924aa1;hb=6ed4fe4508cf7b1927bacca29a5b85f89b86746a;hpb=45468b65af0f731cd14c2ad0516bba9f7cddf217
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)