You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2020/03/19 04:51:12 UTC

[GitHub] [pulsar] kemburi opened a new pull request #6559: [6517][pulsar-client]

kemburi opened a new pull request #6559: [6517][pulsar-client]
URL: https://github.com/apache/pulsar/pull/6559
 
 
   <!--
   ### Contribution Checklist
     
     - Name the pull request in the form "[Issue XYZ][component] Title of the pull request", where *XYZ* should be replaced by the actual issue number.
       Skip *Issue XYZ* if there is no associated github issue for this pull request.
       Skip *component* if you are unsure about which is the best component. E.g. `[docs] Fix typo in produce method`.
   
     - Fill out the template below to describe the changes contributed by the pull request. That will give reviewers the context they need to do the review.
     
     - Each pull request should address only one issue, not mix up code from multiple issues.
     
     - Each commit in the pull request has a meaningful commit message
   
     - Once all items of the checklist are addressed, remove the above text and this checklist, leaving only the filled out template below.
   
   **(The sections below can be removed for hotfixes of typos)**
   -->
   
   *(If this PR fixes a github issue, please add `Fixes #<xyz>`.)*
   
   Fixes #6517
   
   *(or if this PR is one task of a github issue, please add `Master Issue: #<xyz>` to link to the master issue.)*
   
   Master Issue: #<xyz>
   
   ### Motivation
   We need to push data to pulsar from a bcfips complaint jboss. But since pulsar clinet has bc hardcoded as security provider we are not able to push data to pulsar in ssl mode.
   
   
   *Explain here the context, and why you're making that change. What is the problem you're trying to solve.*
   
   ### Modifications
   
   *Describe the modifications you've done.*
   
   ### Verifying this change
   
   - [ ] Make sure that the change passes the CI checks.
   
   *(Please pick either of the following options)*
   
   This change is a trivial rework / code cleanup without any test coverage.
   
   *(or)*
   
   This change is already covered by existing tests, such as *(please describe tests)*.
   
   *(or)*
   
   This change added tests and can be verified as follows:
   
   *(example:)*
     - *Added integration tests for end-to-end deployment with large payloads (10MB)*
     - *Extended integration test for recovery after broker failure*
   
   ### Does this pull request potentially affect one of the following parts:
   
   *If `yes` was chosen, please highlight the changes*
   
     - Dependencies (does it add or upgrade a dependency): (no)
     - The public API: (yes)
     - The schema: (no)
     - The default values of configurations: (no)
     - The wire protocol: (no)
     - The rest endpoints: (no)
     - The admin cli options: (no)
     - Anything that affects deployment: (yes)
   
   ### Documentation
   
     - Does this pull request introduce a new feature? (no)
     - If yes, how is the feature documented? (not documented)
     - If a feature is not applicable for documentation, explain why?
     - If a feature is not documented yet in this PR, please create a followup issue for adding the documentation
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] jiazhai commented on issue #6559: [6517][pulsar-client]

Posted by GitBox <gi...@apache.org>.
jiazhai commented on issue #6559: [6517][pulsar-client]
URL: https://github.com/apache/pulsar/pull/6559#issuecomment-601081777
 
 
   @kemburi Get it. Marked it as WIP(Work in Progress). Mean while I will also take a look on how to make BouncyCastleProvider and BouncyCastleFipsProvider configurable.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] jiazhai commented on issue #6559: [6517][pulsar-client]

Posted by GitBox <gi...@apache.org>.
jiazhai commented on issue #6559: [6517][pulsar-client]
URL: https://github.com/apache/pulsar/pull/6559#issuecomment-601032213
 
 
   @kemburi Thanks for the work. But we may need a way to support both BouncyCastleProvider and BouncyCastleFipsProvider. If doing this in current replace way, the other user that use BouncyCastleProvider will also meet problem.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] kemburi commented on issue #6559: [6517][pulsar-client]

Posted by GitBox <gi...@apache.org>.
kemburi commented on issue #6559: [6517][pulsar-client]
URL: https://github.com/apache/pulsar/pull/6559#issuecomment-601033256
 
 
   @jiazhai yes, I agree, but I wanted to check if my currunt use case on my test systems works or not
   hence made these changes, further testing is going on, if i am successful to push data to pulsar, then i will try to address common crypto framework for the same. But i would take more time, i might need some help.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] sijie commented on issue #6559: [6517][pulsar-client] FIPS BouncyCastle support for cryptography lib(WIP)

Posted by GitBox <gi...@apache.org>.
sijie commented on issue #6559: [6517][pulsar-client] FIPS BouncyCastle support for cryptography lib(WIP)
URL: https://github.com/apache/pulsar/pull/6559#issuecomment-609468949
 
 
   This FIPS provider is supported in #6588. It will be released in 2.5.1 & 2.6.0.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] sijie closed pull request #6559: [6517][pulsar-client] FIPS BouncyCastle support for cryptography lib(WIP)

Posted by GitBox <gi...@apache.org>.
sijie closed pull request #6559: [6517][pulsar-client] FIPS BouncyCastle support for cryptography lib(WIP)
URL: https://github.com/apache/pulsar/pull/6559
 
 
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services