Sumit Gupta created AMBARI-9556:
-----------------------------------
Summary: Knox installation does not create correct
gateway-identity cert
Key: AMBARI-9556
URL: https://issues.apache.org/jira/browse/AMBARI-9556
Project: Ambari
Issue Type: Bug
Components: stacks
Affects Versions: 2.0.0
Reporter: Sumit Gupta
Fix For: 2.0.0
During startup of knox (after install), a cert file is generated using the
knoxcli tool and passing in the hostname that knox is on. There is a check for
this generation to occur if it hasn't been done before. The check is for the
existance of the gateway cert store file. This is done correctly in Ambari 1.7
but the check in 2.x is now against the wrong file. This results in the command
never getting executed and the knox server creating a default cert on startup
which has 'localhost' in it as the CN instead of the actual hostname.
This commit shows where the correct check is lost.
https://git-wip-us.apache.org/repos/asf?p=ambari.git;a=blobdiff;f=ambari-server/src/main/resources/stacks/HDP/2.2/services/KNOX/package/scripts/knox.py;h=7d7d20cc53df4866cfb5bb90171998edcfbcc549;hp=627462ae06a321248085d4d6e6428a780a924aa1;hb=6ed4fe4508cf7b1927bacca29a5b85f89b86746a;hpb=45468b65af0f731cd14c2ad0516bba9f7cddf217
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)