You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Sumit Gupta (JIRA)" <ji...@apache.org> on 2015/02/10 21:41:11 UTC

[jira] [Created] (AMBARI-9556) Knox installation does not create correct gateway-identity cert

Sumit Gupta created AMBARI-9556:
-----------------------------------

             Summary: Knox installation does not create correct gateway-identity cert
                 Key: AMBARI-9556
                 URL: https://issues.apache.org/jira/browse/AMBARI-9556
             Project: Ambari
          Issue Type: Bug
          Components: stacks
    Affects Versions: 2.0.0
            Reporter: Sumit Gupta
             Fix For: 2.0.0


During startup of knox (after install), a cert file is generated using the knoxcli tool and passing in the hostname that knox is on. There is a check for this generation to occur if it hasn't been done before. The check is for the existance of the gateway cert store file. This is done correctly in Ambari 1.7 but the check in 2.x is now against the wrong file. This results in the command never getting executed and the knox server creating a default cert on startup which has 'localhost' in it as the CN instead of the actual hostname.

This commit shows where the correct check is lost. 

https://git-wip-us.apache.org/repos/asf?p=ambari.git;a=blobdiff;f=ambari-server/src/main/resources/stacks/HDP/2.2/services/KNOX/package/scripts/knox.py;h=7d7d20cc53df4866cfb5bb90171998edcfbcc549;hp=627462ae06a321248085d4d6e6428a780a924aa1;hb=6ed4fe4508cf7b1927bacca29a5b85f89b86746a;hpb=45468b65af0f731cd14c2ad0516bba9f7cddf217






--
This message was sent by Atlassian JIRA
(v6.3.4#6332)