This is an automated email from the ASF dual-hosted git repository. asherman pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/impala.git
commit ac5ed0f84946203b165ae68c265fb1de59ad62a9 Author: Andrew Sherman <[email protected]> AuthorDate: Tue Feb 13 13:46:50 2024 -0800 IMPALA-12816: Remove exclusion of Netty to allow SSL connections to HBase It is possible to configure Impala to use SSL when connecting to HBase. Under the covers, an HBase client connection also has a connection to ZooKeeper. SSL connections to ZooKeeper require Netty. Netty has been excluded from Impala’s classpath since IMPALA-9648 because of earlier security problems. IMPALA-9648 says that we need to be at least at version 4.1.44 of Netty and we now pull in 4.1.86. To allow use of SSL with HBase, remove the exclusion of Netty. TESTING: Ran end-to-end tests. Ran queries against HBase configured to use SSL in a Cloudera deployment. Change-Id: Ic3038369345ca74f01ce2d4248c5beb21b633b2b Reviewed-on: http://gerrit.cloudera.org:8080/21034 Reviewed-by: Impala Public Jenkins <[email protected]> Tested-by: Impala Public Jenkins <[email protected]> --- fe/pom.xml | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/fe/pom.xml b/fe/pom.xml index 85ad37676..1e1f7d121 100644 --- a/fe/pom.xml +++ b/fe/pom.xml @@ -69,10 +69,6 @@ under the License. <artifactId>hadoop-hdfs</artifactId> <version>${hadoop.version}</version> <exclusions> - <exclusion> - <groupId>io.netty</groupId> - <artifactId>*</artifactId> - </exclusion> <exclusion> <!-- IMPALA-9108: Avoid pulling in leveldbjni, which is unneeded. --> <groupId>org.fusesource.leveldbjni</groupId> @@ -488,11 +484,6 @@ under the License. <groupId>org.fusesource.leveldbjni</groupId> <artifactId>*</artifactId> </exclusion> - <exclusion> - <!-- IMPALA-9468: Avoid pulling in netty for security reasons --> - <groupId>io.netty</groupId> - <artifactId>*</artifactId> - </exclusion> <exclusion> <groupId>com.sun.jersey</groupId> <artifactId>jersey-server</artifactId> @@ -874,8 +865,6 @@ under the License. <!-- IMPALA-9649 (Avoid pulling in shiro* due to CVE's) --> <exclude>org.apache.shiro:shiro-core:*</exclude> <exclude>org.apache.shiro:shiro-crypto-cipher:*</exclude> - <!-- IMPALA-9648: Ensure that netty-all is not present. --> - <exclude>io.netty:*</exclude> <!-- Avoid runtime dependency on rocksdb. --> <exclude>org.rocksdb:*</exclude> <!-- Avoid runtime dependency on Jersey server components. -->
