Dan Burkert has submitted this change and it was merged. Change subject: KUDU-1929: [rpc] Allow using encrypted private keys for TLS ......................................................................
KUDU-1929: [rpc] Allow using encrypted private keys for TLS * This patch adds a new flag for a "password command" for the RPC private key. * This also makes the webserver move to using the new function GetPasswordFromShellCommand(). * This also consolidates certificates from security-test-util into security/tests/test_certs Testing: Adds 2 tests. One to verify that RPCs work when providing the right password for password protected private keys, and one to verify that the Messenger does not startup if the wrong password is provided when using a password protected private key. Change-Id: Ifd6369581fa426ceab11e4a10441658c7da47e81 Reviewed-on: http://gerrit.cloudera.org:8080/6635 Tested-by: Kudu Jenkins Reviewed-by: Sailesh Mukil <sail...@cloudera.com> --- M src/kudu/integration-tests/registration-test.cc M src/kudu/rpc/messenger.cc M src/kudu/rpc/rpc-test.cc M src/kudu/security/crypto.cc M src/kudu/security/crypto.h M src/kudu/security/openssl_util.cc M src/kudu/security/openssl_util.h M src/kudu/security/openssl_util_bio.h M src/kudu/security/security-test-util.cc M src/kudu/security/security-test-util.h M src/kudu/security/test/test_certs.cc M src/kudu/security/test/test_certs.h M src/kudu/security/tls_context.cc M src/kudu/security/tls_context.h M src/kudu/server/webserver-test.cc M src/kudu/server/webserver.cc M src/kudu/server/webserver_options.cc 17 files changed, 340 insertions(+), 165 deletions(-) Approvals: Sailesh Mukil: Looks good to me, approved Kudu Jenkins: Verified -- To view, visit http://gerrit.cloudera.org:8080/6635 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ifd6369581fa426ceab11e4a10441658c7da47e81 Gerrit-PatchSet: 10 Gerrit-Project: kudu Gerrit-Branch: master Gerrit-Owner: Sailesh Mukil <sail...@cloudera.com> Gerrit-Reviewer: Alexey Serbin <aser...@cloudera.com> Gerrit-Reviewer: Dan Burkert <danburk...@apache.org> Gerrit-Reviewer: Kudu Jenkins Gerrit-Reviewer: Sailesh Mukil <sail...@cloudera.com> Gerrit-Reviewer: Tidy Bot Gerrit-Reviewer: Todd Lipcon <t...@apache.org>
