[jira] [Resolved] (AMBARI-6608) Ambari server should inform the agent whether to use two-way ssl when registering

["Dmitry Lysnichenko (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-6608?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dmitry Lysnichenko resolved AMBARI-6608.
----------------------------------------

    Resolution: Fixed

committed to trunk

> Ambari server should inform the agent whether to use two-way ssl when registering
> ---------------------------------------------------------------------------------
>
>                 Key: AMBARI-6608
>                 URL: https://issues.apache.org/jira/browse/AMBARI-6608
>             Project: Ambari
>          Issue Type: Task
>          Components: agent, controller
>    Affects Versions: 1.5.1
>            Reporter: Dmitry Lysnichenko
>            Assignee: Dmitry Lysnichenko
>             Fix For: 1.7.0
>
>
> Currently, agent uses a implicit mechanism to decide whether to use two-way ssl. It tries to connect normally and if it fails it switches to using two-way ssl.
> We should improve this setup to make it explicit. The initial GET call agent makes (server:8440/cert/ca) should return a response providing the requirement from the agent (e.g. "two_way_ssl" : "true" ). Agent should use this data and decide on the nature of the connection.



--
This message was sent by Atlassian JIRA
(v6.2#6252)