FrankChen021 opened a new pull request #11743:
URL: https://github.com/apache/druid/pull/11743
### Description
Current Integration test uses 1024-bit RSA key to generate certificates for
TLS. There're warnings when generating such RSA keys or running docker images.
The warnings show as follows:
```
<druid> uses a 1024-bit RSA key which is considered a security risk. This
key size will be disabled in a future update.
```
These warnings are noisy information when handling IT test case build
failures such as #11663 . So I upgrade the length of RSA key from 1024 to 4096
to eliminate all of these warnings.
There're also wanings about use of keystore format as follows
```bash
The JKS keystore uses a proprietary format. It is recommended to migrate to
PKCS12 which is an industry standard format using "keytool -importkeystore
-srckeystore client.jks -destkeystore client.jks -deststoretype pkcs12".
```
I also change the format of keystore from JKS to PKCS12 to eliminate these
warnings.
This PR has:
- [X] been self-reviewed.
- [ ] using the [concurrency
checklist](https://github.com/apache/druid/blob/master/dev/code-review/concurrency.md)
(Remove this item if the PR doesn't have any relation to concurrency.)
- [ ] added documentation for new or modified features or behaviors.
- [ ] added Javadocs for most classes and all non-trivial methods. Linked
related entities via Javadoc links.
- [ ] added or updated version, license, or notice information in
[licenses.yaml](https://github.com/apache/druid/blob/master/dev/license.md)
- [ ] added comments explaining the "why" and the intent of the code
wherever would not be obvious for an unfamiliar reader.
- [ ] added unit tests or modified existing tests to cover new code paths,
ensuring the threshold for [code
coverage](https://github.com/apache/druid/blob/master/dev/code-review/code-coverage.md)
is met.
- [ ] added integration tests.
- [ ] been tested in a test Druid cluster.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
