This is an automated email from the ASF dual-hosted git repository.
JNSimba pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new 81b1e379cab [fix](regression) Align connector TLS regression settings
(#67018)
81b1e379cab is described below
commit 81b1e379cab42148fd23ad657937d4e05c918264
Author: wudi <[email protected]>
AuthorDate: Tue Aug 25 07:51:17 2026 +0800
[fix](regression) Align connector TLS regression settings (#67018)
### What problem does this PR solve?
Issue Number: N/A
Related PR: https://github.com/apache/doris/pull/66658
Problem Summary:
Connector regression cases derived hostname verification and excluded
protocols from framework TLS settings. This could disable Arrow Flight
TLS coverage or skip hostname verification unintentionally. When TLS is
enabled, pass the CA certificate and require hostname verification for
every connector protocol.
---
regression-test/conf/regression-conf.groovy | 2 --
.../src/main/groovy/org/apache/doris/regression/suite/Suite.groovy | 6 +-----
2 files changed, 1 insertion(+), 7 deletions(-)
diff --git a/regression-test/conf/regression-conf.groovy
b/regression-test/conf/regression-conf.groovy
index 394a06d05e1..afbe0b1a5c3 100644
--- a/regression-test/conf/regression-conf.groovy
+++ b/regression-test/conf/regression-conf.groovy
@@ -306,8 +306,6 @@ icebergS3TablesCatalogGlueRest=""
// The path of the cert configuration file for the testing framework
// is consistent with the path of the cert file for the cluster
enableTLS=false
-// Comma-separated Doris connector protocols that remain plaintext when TLS is
enabled
-tlsExcludedProtocols=""
tlsVerifyMode="strict"
keyStorePath="/your/keystore.p12"
keyStorePassword="yourPwd"
diff --git
a/regression-test/framework/src/main/groovy/org/apache/doris/regression/suite/Suite.groovy
b/regression-test/framework/src/main/groovy/org/apache/doris/regression/suite/Suite.groovy
index d333cb6bba7..875029ec84f 100644
---
a/regression-test/framework/src/main/groovy/org/apache/doris/regression/suite/Suite.groovy
+++
b/regression-test/framework/src/main/groovy/org/apache/doris/regression/suite/Suite.groovy
@@ -135,14 +135,10 @@ class Suite implements GroovyInterceptable {
return Collections.emptyList()
}
- String tlsVerifyMode = getConf("tlsVerifyMode", "strict")
- boolean skipHostnameVerification =
!tlsVerifyMode.equalsIgnoreCase("strict")
- String excludedProtocols = getConf("tlsExcludedProtocols", "")
return [
"--doris-enable-tls", "true",
"--doris-tls-ca-certificate-path", getConf("trustCACert"),
- "--doris-tls-skip-hostname-verification",
skipHostnameVerification.toString(),
- "--doris-tls-excluded-protocols", excludedProtocols
+ "--doris-tls-skip-hostname-verification", "false"
]
}
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
