You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@arrow.apache.org by "Tiffany Lam (Jira)" <ji...@apache.org> on 2020/10/07 21:45:00 UTC

[jira] [Commented] (ARROW-10144) [Flight] Add support for using the TLS_SNI extension

    [ https://issues.apache.org/jira/browse/ARROW-10144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17209883#comment-17209883 ] 

Tiffany Lam commented on ARROW-10144:
-------------------------------------

[~jduong] I have verified that there are existing TLS SNI configurations available in the FlightClient implementations and they work. 

*Java Client* - When connecting with a FlightClient using TLS, add builder option overrideHostname.

*Python Client* - When connecting with a FlightClient using TLS, add a connection argument called generic_options. [generic-options|https://github.com/apache/arrow/blob/732e333c49555f696e5c1885629e2fafa8d0fd65/python/pyarrow/_flight.pyx#L1014] is a list of tuples that stores other generic Grpc connection arguments. To the list of generic options, add the following tuple ('grpc.ssl_target_name_override', server_name).

*C++ Client* - Python client wraps the C++ client. 

 

This ticket can be closed.

> [Flight] Add support for using the TLS_SNI extension
> ----------------------------------------------------
>
>                 Key: ARROW-10144
>                 URL: https://issues.apache.org/jira/browse/ARROW-10144
>             Project: Apache Arrow
>          Issue Type: Improvement
>          Components: C++, FlightRPC, Java, Python
>            Reporter: James Duong
>            Priority: Major
>             Fix For: 3.0.0
>
>
> When using encryption, add support for the TLS_SNI extension (https://en.wikipedia.org/wiki/Server_Name_Indication).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)