Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
Description
The RESTServer currently relies on the following parameters to configure SSL on the REST API:
- hbase.rest.ssl.enabled
- hbase.rest.ssl.keystore.store
- hbase.rest.ssl.keystore.password
- hbase.rest.ssl.keystore.keypassword
- hbase.rest.ssl.exclude.cipher.suites
- hbase.rest.ssl.include.cipher.suites
- hbase.rest.ssl.exclude.protocols
- hbase.rest.ssl.include.protocols
In this patch I want to introduce the following new parameters:
- hbase.rest.ssl.keystore.type
- hbase.rest.ssl.truststore.store
- hbase.rest.ssl.truststore.password
- hbase.rest.ssl.truststore.type
If any of the new the parameter is not provided, then we should fall-back to the current behaviour (e.g. assuming JKS keystore/truststore types, or no passwords, or no custom trust store file).
Attachments
Issue Links
- links to