Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

ISSUE 608 : Support one way SSL in schema registry client. #609

Merged
merged 3 commits into from
Oct 21, 2019

Conversation

raju-saravanan
Copy link
Collaborator

@raju-saravanan raju-saravanan commented Oct 15, 2019

Fixes #608

Copy link
Contributor

@guruchai guruchai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.... a few nits.


if (sslConfigurations.containsKey(SSL_TRUST_STORE_PATH)) {
sslConfigurator.trustStoreType(sslConfigurations.get("trustStoreType"))
.trustStoreFile(sslConfigurations.get("trustStorePath"))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: you can replace this with SSL_TRUST_STORE_PATH

return Arrays.asList(SchemaRegistryTestProfileType.DEFAULT, SchemaRegistryTestProfileType.SSL);
return Arrays.asList(SchemaRegistryTestProfileType.DEFAULT,
SchemaRegistryTestProfileType.SSL,
SchemaRegistryTestProfileType.SSL_WITH_SERVER_AUTH);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: SSL_WITH_SERVER_AUTH sounds a bit confusing to me. Do you want to change to it to ONE_WAY_SSL?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The profile I introduced requires server authentication but client doesn't and I wanted to add another profile where client requires authentication but server doesn't. If you think its ok to only have the former we can change it to ONE_WAY_SSL, if not I will add SSL_WITH_CLIENT_AUTH profile.

@raju-saravanan raju-saravanan changed the title ISSUE 608 : Support server auth only SSL in schema registry client. ISSUE 608 : Support one way SSL in schema registry client. Oct 18, 2019
@raju-saravanan raju-saravanan merged commit 21f73ec into hortonworks:master Oct 21, 2019
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Schema Registry Client should support one way SSL
2 participants