[
https://issues.apache.org/jira/browse/ACCUMULO-1009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13770894#comment-13770894
]
Michael Allen commented on ACCUMULO-1009:
-----------------------------------------
I wanted to +1 Michael's comments above around setting up an independent set of
roots for your cluster. Getting "real" certificates is a pain in the <insert
your favorite body part here>, especially when you start talking about trying
to set up your own sub-root from which you can cut certificates. Requiring
someone to understand how to do all that and then set up a bunch of
configuration properties on top of it puts up a big barrier to entry.
Having something like Michael's suggested {{bin/accumulo init-ssl}} call do the
certificate generation and configuration for you would be my strongly preferred
choice, and would make setting up secure clusters much much easier. The work
to set up a reasonably secure SSL deployment is boilerplate, albeit complex
boilerplate. Unless you are extremely keen on handling this setup yourself, or
your company has stringent requirements in this area, having a very easy to set
up SSL configuration is a big boon.
I also agree that being able to quickly test an SSL-enabled mini-cluster is
another huge win for making this code easily testable and maintainable.
> Support encryption over the wire
> --------------------------------
>
> Key: ACCUMULO-1009
> URL: https://issues.apache.org/jira/browse/ACCUMULO-1009
> Project: Accumulo
> Issue Type: New Feature
> Reporter: Keith Turner
> Assignee: Michael Berman
> Fix For: 1.6.0
>
> Attachments: ACCUMULO-1009_thriftSsl.patch
>
>
> Need to support encryption between ACCUMULO clients and servers. Also need
> to encrypt communications between server and servers.
> Basically need to make it possible for users to enable SSL+thrift.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
