[jira] [Commented] (FLINK-9312) Perform mutual authentication during SSL handshakes

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-9312?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16540219#comment-16540219 ] 

ASF GitHub Bot commented on FLINK-9312:
---------------------------------------

Github user EronWright commented on the issue:

    https://github.com/apache/flink/pull/5966
  
    @StephanEwen I would like to work on this issue, building on your PR, would that be OK?


> Perform mutual authentication during SSL handshakes
> ---------------------------------------------------
>
>                 Key: FLINK-9312
>                 URL: https://issues.apache.org/jira/browse/FLINK-9312
>             Project: Flink
>          Issue Type: New Feature
>          Components: Security
>            Reporter: Stephan Ewen
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.6.0
>
>
> Currently, the Flink processes encrypted connections via SSL:
>   - Data exchange TM - TM
>   - RPC JM - TM
>   - Blob Service JM - TM
> However, the server side always accepts any client to build up the connection, meaning the connections are not strongly authenticated.
> Activating SSL mutual authentication solves that - only processes that have the same certificate can connect.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)