You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Pradeep Agrawal (JIRA)" <ji...@apache.org> on 2018/02/22 10:00:09 UTC
[jira] [Updated] (RANGER-1990) Add SSL enabled MySQL support in
Ranger Admin
[ https://issues.apache.org/jira/browse/RANGER-1990?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pradeep Agrawal updated RANGER-1990:
------------------------------------
Description:
*Problem Statement:* Currently Ranger can communicate to SSL enabled MySQL server but only if 2-way SSL config is provided, Ranger should support for MySQL configured in Standard SSL(one-way) mode.
*Proposed Solution:* For mutual SSL (2-way) support keystore is required, which is currently mandatory even if user want to connect to MySQL by using Standard(1-way). Proposed solution requires changes in install.properites to have a property 'db_ssl_auth_type' which can have value '1-way' or '2-way'. Default value shall be '2-way'. In case of '1-way', support keystore won't be required however truststore is mandatory.
> Add SSL enabled MySQL support in Ranger Admin
> ---------------------------------------------
>
> Key: RANGER-1990
> URL: https://issues.apache.org/jira/browse/RANGER-1990
> Project: Ranger
> Issue Type: Improvement
> Components: Ranger
> Affects Versions: 0.7.0
> Reporter: Pradeep Agrawal
> Assignee: Pradeep Agrawal
> Priority: Major
> Fix For: 1.0.0
>
>
> *Problem Statement:* Currently Ranger can communicate to SSL enabled MySQL server but only if 2-way SSL config is provided, Ranger should support for MySQL configured in Standard SSL(one-way) mode.
> *Proposed Solution:* For mutual SSL (2-way) support keystore is required, which is currently mandatory even if user want to connect to MySQL by using Standard(1-way). Proposed solution requires changes in install.properites to have a property 'db_ssl_auth_type' which can have value '1-way' or '2-way'. Default value shall be '2-way'. In case of '1-way', support keystore won't be required however truststore is mandatory.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)