Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ISSUE 608 : Support one way SSL in schema registry client. #609

Merged
merged 3 commits into from
Oct 21, 2019

Conversation

raju-saravanan
Copy link
Collaborator

@raju-saravanan raju-saravanan commented Oct 15, 2019

Fixes #608

Copy link
Contributor

@guruchai guruchai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.... a few nits.


if (sslConfigurations.containsKey(SSL_TRUST_STORE_PATH)) {
sslConfigurator.trustStoreType(sslConfigurations.get("trustStoreType"))
.trustStoreFile(sslConfigurations.get("trustStorePath"))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: you can replace this with SSL_TRUST_STORE_PATH

return Arrays.asList(SchemaRegistryTestProfileType.DEFAULT, SchemaRegistryTestProfileType.SSL);
return Arrays.asList(SchemaRegistryTestProfileType.DEFAULT,
SchemaRegistryTestProfileType.SSL,
SchemaRegistryTestProfileType.SSL_WITH_SERVER_AUTH);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: SSL_WITH_SERVER_AUTH sounds a bit confusing to me. Do you want to change to it to ONE_WAY_SSL?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The profile I introduced requires server authentication but client doesn't and I wanted to add another profile where client requires authentication but server doesn't. If you think its ok to only have the former we can change it to ONE_WAY_SSL, if not I will add SSL_WITH_CLIENT_AUTH profile.

@raju-saravanan raju-saravanan changed the title ISSUE 608 : Support server auth only SSL in schema registry client. ISSUE 608 : Support one way SSL in schema registry client. Oct 18, 2019
@raju-saravanan raju-saravanan merged commit 21f73ec into hortonworks:master Oct 21, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Schema Registry Client should support one way SSL
2 participants