Alexey Serbin has posted comments on this change. ( http://gerrit.cloudera.org:8080/24374 )
Change subject: KUDU-3781: Add TLS support to MiniHms ...................................................................... Patch Set 2: (1 comment) http://gerrit.cloudera.org:8080/#/c/24374/2/src/kudu/hms/mini_hms.cc File src/kudu/hms/mini_hms.cc: http://gerrit.cloudera.org:8080/#/c/24374/2/src/kudu/hms/mini_hms.cc@305 PS2, Line 305: ku:c=dig,keyEncipherment Whoops, it's my bad -- I provided non-consistent information offline for this flag. It should have been BasicConstraints:critical=ca:true Otherwise, when using the CA certificate as the trusted one for the C++ Thrift client, OpenSSL doesn't see the CA extension and fails the TLS handshake. -- To view, visit http://gerrit.cloudera.org:8080/24374 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I8fca647fd900fafc6d737c93a4af4565631839b7 Gerrit-Change-Number: 24374 Gerrit-PatchSet: 2 Gerrit-Owner: Zoltan Chovan <[email protected]> Gerrit-Reviewer: Abhishek Chennaka <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Marton Greber <[email protected]> Gerrit-Reviewer: Zoltan Chovan <[email protected]> Gerrit-Comment-Date: Thu, 28 May 2026 21:49:04 +0000 Gerrit-HasComments: Yes
