[
https://issues.apache.org/jira/browse/ACCUMULO-1009?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13772018#comment-13772018
]
Josh Elser commented on ACCUMULO-1009:
--------------------------------------
Trying to catch up on the discussion (glad to see such in-depth discussion :D)
As [~kturner] and [~_alexm] touched on, I think it may be good to take a step
back and provision out the sub-tasks here. As a general statement, my gut
agrees that we don't want to be in the "security provisioning" realm just for
the monumental difficulties in doing it correctly. That being said, I think it
would be prudent to have some sort of "basic" mechanism in which we can test
things. The simplest approach to me would be to generate cert(s), keystore,
local-CA, and w/e else we need to run "securely" for MAC, document how it was
done, and then bundle that as a first go-around. A sub-task can be made to find
a happy medium with what we could do automatically and what is best left up to
the integrator/sys-admin?
Testing security for the sake of "is it secure?" is likely without much gain,
but there are definitely the edge-cases like [~kturner] pointed out which need
testing.
All that being said, trying to break down the larger wire encryption issue into
some more tenable pieces is a good idea (plus so the next patch doesn't break
the 4k line count :D)
> Support encryption over the wire
> --------------------------------
>
> Key: ACCUMULO-1009
> URL: https://issues.apache.org/jira/browse/ACCUMULO-1009
> Project: Accumulo
> Issue Type: New Feature
> Reporter: Keith Turner
> Assignee: Michael Berman
> Fix For: 1.6.0
>
> Attachments: ACCUMULO-1009_thriftSsl.patch
>
>
> Need to support encryption between ACCUMULO clients and servers. Also need
> to encrypt communications between server and servers.
> Basically need to make it possible for users to enable SSL+thrift.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
