[ https://issues.apache.org/jira/browse/IMPALA-3185?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jim Apple updated IMPALA-3185: ------------------------------ Summary: Toolchain should verify download hash (was: Toolchain should not verify download hash) > Toolchain should verify download hash > ------------------------------------- > > Key: IMPALA-3185 > URL: https://issues.apache.org/jira/browse/IMPALA-3185 > Project: IMPALA > Issue Type: Improvement > Components: Infrastructure > Affects Versions: Impala 2.5.0 > Reporter: Jim Apple > Priority: Major > Labels: security > > According to https://issues.cloudera.org/browse/IMPALA-3184 , the toolchain > downloads things from the public internet over ftp. It should only use > encrypted connections like sftp and it should check hashes when possible. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org