This is an automated email from the ASF dual-hosted git repository. ritik pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/asterixdb.git
commit 184a963c553b8edd2e22e97b5d034108727a7ff3 Author: Michael Blow <[email protected]> AuthorDate: Wed Jan 15 14:52:11 2025 -0500 [NO ISSUE][HYR][NET] += INetworkSecurityConfig.useMutualAuth Ext-ref: MB-XXXXXX Change-Id: Ia79ceb64e251362772f5d8d3a8cf35f3197b37fa Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/19315 Reviewed-by: Michael Blow <[email protected]> Reviewed-by: Ian Maxon <[email protected]> Tested-by: Michael Blow <[email protected]> --- .../org/apache/hyracks/api/network/INetworkSecurityConfig.java | 7 +++++++ .../org/apache/hyracks/ipc/security/NetworkSecurityConfig.java | 5 +++++ 2 files changed, 12 insertions(+) diff --git a/hyracks-fullstack/hyracks/hyracks-api/src/main/java/org/apache/hyracks/api/network/INetworkSecurityConfig.java b/hyracks-fullstack/hyracks/hyracks-api/src/main/java/org/apache/hyracks/api/network/INetworkSecurityConfig.java index e581c5a00f..2e00e4d108 100644 --- a/hyracks-fullstack/hyracks/hyracks-api/src/main/java/org/apache/hyracks/api/network/INetworkSecurityConfig.java +++ b/hyracks-fullstack/hyracks/hyracks-api/src/main/java/org/apache/hyracks/api/network/INetworkSecurityConfig.java @@ -35,6 +35,13 @@ public interface INetworkSecurityConfig extends Serializable { */ boolean isSslEnabled(); + /** + * Indicates if any authentication being performed should mutual (e.g. mTLS, SCRAM-SHA) + * + * @return true if mutual auth should be used. Otherwise false. + */ + boolean useMutualAuth(); + /** * Indicates how to handle client authentication when ssl is enabled */ diff --git a/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityConfig.java b/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityConfig.java index a8bd087dd4..03cdbe9c66 100644 --- a/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityConfig.java +++ b/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityConfig.java @@ -69,6 +69,11 @@ public class NetworkSecurityConfig implements INetworkSecurityConfig { return sslEnabled; } + @Override + public boolean useMutualAuth() { + return false; + } + @Override public ClientAuth getClientAuth() { return ClientAuth.NONE;
