Larry McCay created HADOOP-16076:
------------------------------------
Summary: SPNEGO+SSL Client Connections with HttpClient Broken
Key: HADOOP-16076
URL: https://issues.apache.org/jira/browse/HADOOP-16076
Project: Hadoop Common
Issue Type: Bug
Components: build, security
Affects Versions: 3.2.0
Reporter: Larry McCay
Assignee: Larry McCay
Client connections with HttpClient to a SPNEGO secured endpoint with TLS
enabled break due to a misrepresentation of the SPN to include HTTPS instead of
just HTTP.
The current use of HTTPClient 4.5.2 is affected by HTTPCLIENT-1712 and breaks
SPNEGO with HTTPS endpoints since it include the httpS in the principal name.
We need to migrate to at least 4.5.3 as we have tested with that version and
observed it fixing the issue. Need to do some due diligence to determine the
cleanest version to upgrade to but will provide a patch in a day or so.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org
