[ 
https://issues.apache.org/jira/browse/DRILL-5431?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16166721#comment-16166721
 ] 

Laurent Goujon commented on DRILL-5431:
---------------------------------------

I had a cursory look at the commits. One comment I have is about maybe some 
lack of flexibility regarding integration with external truststore for the 
client (and similar for hostname verification).

For the JDBC driver, because of the way of driver is loaded, and connections 
are created, everything has to be done through connection properties :( But it 
doesn't have to be the case for the C++ and Java Drill clients. I believe that 
similar to http clients where you can provide trust stores and hostname 
verifier, these clients should have the same capabilities. It is probably more 
of the requirement for the C++ client than the Java one, as JRE comes up with a 
truststore similar to the browser ones, whereas OpenSSL library has maybe none 
on windows (or for organizations having their own CA integrated at the OS 
level, might require special care). Maybe [~robertw] has some opinion on this 
based on this experience on integrating drivers on various platforms?

> Support SSL
> -----------
>
>                 Key: DRILL-5431
>                 URL: https://issues.apache.org/jira/browse/DRILL-5431
>             Project: Apache Drill
>          Issue Type: New Feature
>          Components: Client - Java, Client - ODBC
>            Reporter: Sudheesh Katkam
>            Assignee: Sudheesh Katkam
>
> Support SSL between Drillbit and JDBC/ODBC drivers. Drill already supports 
> HTTPS for web traffic.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to