Dmitry Sen created AMBARI-2270:
----------------------------------

             Summary: Provide way to optionally enable two-way SSL for 
Server-Agent communication
                 Key: AMBARI-2270
                 URL: https://issues.apache.org/jira/browse/AMBARI-2270
             Project: Ambari
          Issue Type: Improvement
          Components: agent
    Affects Versions: 1.2.3
            Reporter: Dmitry Sen
            Assignee: Dmitry Sen
            Priority: Critical
             Fix For: 1.3.0


The two-way SSL mechanism used during server-agent registration exists to 
protect communication. This is useful in production environments but in typical 
"first use" or POC scenarios, having this level of security is not necessary. 
As well, certificate generation can be problematic causing failures.
We need to provide a way to make this mechanism optional:
1) By default, ship with Server-Agent Two-Way SSL on.
2) At any time post install, a user should be able to turn off Two-Way SSL and 
turn it back on.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to