[ https://issues.apache.org/jira/browse/HIVE-21306?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16777651#comment-16777651 ]
Ashutosh Bapat commented on HIVE-21306: --------------------------------------- [~sankarh] can you please review and commit this? > Upgrade HttpComponents to the latest versions similar to what Hadoop has done. > ------------------------------------------------------------------------------ > > Key: HIVE-21306 > URL: https://issues.apache.org/jira/browse/HIVE-21306 > Project: Hive > Issue Type: Bug > Components: HiveServer2 > Affects Versions: 4.0.0 > Reporter: Ashutosh Bapat > Assignee: Ashutosh Bapat > Priority: Major > Labels: pull-request-available > Fix For: 4.0.0 > > Attachments: HIVE-21306.01.patch > > Original Estimate: 24h > Time Spent: 10m > Remaining Estimate: 23h 50m > > The use of HTTPClient 4.5.2 breaks the use of SPNEGO over TLS. > It mistakenly added HTTPS instead of HTTP to the principal when over SSL and > thus breaks the authentication. > This was upgraded recently in Hadoop and needs to be done for Hive as well. > See: HADOOP-16076 > Where we upgraded from 4.5.2 and 4.4.4 to 4.5.6 and 4.4.10. > <!-- httpcomponents versions --> > <httpclient.version>4.5.2</httpclient.version> > <httpcore.version>4.4.4</httpcore.version> > + <httpclient.version>4.5.6</httpclient.version> > + <httpcore.version>4.4.10</httpcore.version> -- This message was sent by Atlassian JIRA (v7.6.3#76005)