anmolnar opened a new pull request, #4666: URL: https://github.com/apache/hbase/pull/4666
Based on @Apache9 's suggestions and the previous PR #4125 the following changes have been incorporated: - `flush()` call handling is fixed in `BufferCallBeforeInitHandler`, so it will not block the SSL handshake, - `SSLContext` and `SSLEngine` are now based on Netty's `SslContextBuilder` class. In order to fully take advantage of that I had to add ByteBufAllocator config to the client side like we already have in the server, - `SSLContext` is cached in `X509Util` for client and server. This is because I'd like to add FileWatchers for keystore/truststore in order to easily renew certificates in a running cluster. cc @bbeaudreault @meszibalu -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@hbase.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
