[ 
https://issues.apache.org/jira/browse/KNOX-99?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13778926#comment-13778926
 ] 

Larry McCay commented on KNOX-99:
---------------------------------

Maksim - can you please see KNOX-162 for instructions on providing your own SSL 
certificate?
My intention is that these instructions be used for any circumstance that the 
hardcoded localhost mode is insufficient.

At the same time, we should also be able to test the use of the created 
keystore on the client side as the trust store.

NOTE: the keystore password AND the key passphrase needs to be the same as the 
password you provide in the creation of the Knox install at first run. This is 
short term approach until we provide an import-cert facility for Knox 
install/startup that will also prompt for key password or generate one.

Also, note that you must also create the credential store - the fact that there 
is no alias created for the SSL cert key within the credential store triggers 
the attempt to use the keystore password.

Once we test these scenarios, I will document this process for providing your 
own SSL cert and we can point to it from any documentation that illustrates 
development scenarios such as yours.
                
> Cover Hive in samples
> ---------------------
>
>                 Key: KNOX-99
>                 URL: https://issues.apache.org/jira/browse/KNOX-99
>             Project: Apache Knox
>          Issue Type: New Feature
>          Components: Server, Site
>    Affects Versions: 0.3.0
>            Reporter: Kevin Minder
>            Assignee: Maksim Kononenko
>            Priority: Blocker
>             Fix For: 0.3.0
>
>         Attachments: KNOX-99_3.patch, KNOX-99_4.patch, KNOX-99.patch
>
>
> Hive needs to be fully covered in the samples.  This includes out of the box 
> configuration in deployments/sample.xml and in the site documentation 
> https://cwiki.apache.org/confluence/display/KNOX/Examples

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to