[jira] [Resolved] (AMBARI-2270) Provide way to optionally enable two-way SSL for Server-Agent communication

["Sumit Mohanty (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-2270?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sumit Mohanty resolved AMBARI-2270.
-----------------------------------

    Resolution: Fixed
    
> Provide way to optionally enable two-way SSL for Server-Agent communication
> ---------------------------------------------------------------------------
>
>                 Key: AMBARI-2270
>                 URL: https://issues.apache.org/jira/browse/AMBARI-2270
>             Project: Ambari
>          Issue Type: Improvement
>          Components: agent, controller
>    Affects Versions: 1.2.3
>            Reporter: Dmitry Sen
>            Assignee: Dmitry Sen
>            Priority: Critical
>             Fix For: 1.3.0
>
>         Attachments: AMBARI-2270.patch
>
>
> The two-way SSL mechanism used during server-agent registration exists to protect communication. This is useful in production environments but in typical "first use" or POC scenarios, having this level of security is not necessary. As well, certificate generation can be problematic causing failures.
> We need to provide a way to make this mechanism optional:
> 1) By default, ship with Server-Agent Two-Way SSL off.
> 2) At any time post install, a user should be able to turn on Two-Way SSL and turn it back off, etc.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira