Attila Bukor has uploaded a new patch set (#9) to the change originally created by Zoltan Chovan. ( http://gerrit.cloudera.org:8080/20017 )
Change subject: [wip][client] allow adding trusted CA certs for RPC connection negotiation ...................................................................... [wip][client] allow adding trusted CA certs for RPC connection negotiation This change is adding the following: New method to the KuduClient API * trustedCertificate(List<ByteString> certificates) Mark the given CA cert (provided in DER form) as the trusted CA cert for the client. Replaces any previously trusted cert. A new method 'getClusterCACertDer()' to acquire the CA Cert of the ExternalMiniCluster via the KuduTestHarness Java class. A new method 'getMasterWebServerAddressesAsString()' which returns the webserver addresses of the Master Servers in a comma separated string. This change also modifies the behavior of the Java client in a way so that we do not explicitly trust the Master CA certificate if the authentication method negotiated is JWT. There is also an upadte to the Negotiator java class to fix issues with the JWT auth negotiation. WIP: -- add various negative test cases Change-Id: I281fd59da0d24a6119b99e1da8096f381b414a2b --- M java/kudu-client/src/main/java/org/apache/kudu/client/AsyncKuduClient.java M java/kudu-client/src/main/java/org/apache/kudu/client/KuduClient.java M java/kudu-client/src/main/java/org/apache/kudu/client/Negotiator.java M java/kudu-client/src/main/java/org/apache/kudu/client/SecurityContext.java M java/kudu-client/src/test/java/org/apache/kudu/client/TestNegotiation.java M java/kudu-test-utils/src/main/java/org/apache/kudu/test/KuduTestHarness.java M java/kudu-test-utils/src/main/java/org/apache/kudu/test/cluster/MiniKuduCluster.java M java/kudu-test-utils/src/test/java/org/apache/kudu/test/TestMiniKuduCluster.java 8 files changed, 217 insertions(+), 32 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/17/20017/9 -- To view, visit http://gerrit.cloudera.org:8080/20017 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: newpatchset Gerrit-Change-Id: I281fd59da0d24a6119b99e1da8096f381b414a2b Gerrit-Change-Number: 20017 Gerrit-PatchSet: 9 Gerrit-Owner: Zoltan Chovan <zcho...@cloudera.com> Gerrit-Reviewer: Alexey Serbin <ale...@apache.org> Gerrit-Reviewer: Attila Bukor <abu...@apache.org> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241)
