sahilTakiar opened a new pull request #784: HADOOP-16050: s3a SSL connections should use OpenSSL URL: https://github.com/apache/hadoop/pull/784 This patch does the following: * Introduces a new S3A configuration parameter called `fs.s3a.ssl.channel.mode` (name was chosen to be consistent with the ABFS version `fs.azure.ssl.channel.mode`) * By default, this config sets OpenSSL as the `SSLSocketFactory` for secure S3 connections; if OpenSSL is not available at runtime, then the default JSEE implementation is used * Moves `SSLSocketFactoryEx` from the azure module to hadoop-common and renames it to `OpenSSLSocketFactory`; this way it can be used by both ABFS and S3 * Adds a few unit tests for the new S3A logic + a few unit tests for `OpenSSLSocketFactory` All core S3A itests were run against us-east-1 and they all passed (`ITestS3AContractDistCp` failed once, but worked on retry). Right now this feature is enabled by default, but I'm opening to turning it off by default / marking it as experimental if we want to let it bake for a while.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
