ramackri opened a new pull request, #1078: URL: https://github.com/apache/ranger/pull/1078
## Summary - Backports [RANGER-5689 (#1076)](https://github.com/apache/ranger/pull/1076) / commit [c631e8314](https://github.com/apache/ranger/commit/c631e8314b70b01cd5bb5bb2bf4ba17985da585a) to `ranger-2.9`. - Adds `RangerDefaultHostnameVerifier` (delegates to Apache `DefaultHostnameVerifier`) and replaces ad-hoc `session.getPeerHost().equals(urlHostName)` verifiers in plugin REST clients. - JDK 8 adaptations: explicit JKS storetype in test keystore script, `JAVA_HOME` keytool usage, Java 8-compatible test helpers, and wildcard SAN workaround for JDK 8 `keytool` limits. ## Files changed | File | Change | |------|--------| | `RangerDefaultHostnameVerifier.java` | New shared hostname verifier | | `RangerRESTClient.java` | Use `RangerDefaultHostnameVerifier` | | `RangerSslHelper.java` | Use `RangerDefaultHostnameVerifier` | | `RangerAdminJersey2RESTClient.java` | Use `RangerDefaultHostnameVerifier` | | `RangerUgSyncRESTClient.java` | Use `RangerDefaultHostnameVerifier` | | `TestRangerDefaultHostnameVerifier.java` | New unit tests | | `generate-test-keystores.sh` | Test keystore generator | ## Test plan - [x] `unset MAVEN_OPTS && mvn test -pl agents-common -Dtest=TestRangerDefaultHostnameVerifier` (JDK 8) Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
