-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35681/
-----------------------------------------------------------

Review request for Ambari, Jonathan Hurley and Robert Levas.


Bugs: AMBARI-12032
    https://issues.apache.org/jira/browse/AMBARI-12032


Repository: ambari


Description
-------

Add an option to setup-security to configure truststore and add certificates.
After setting up wire encryption for Hadoop ...
http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.0.9.0/bk_reference/content/ch_wire6.html

The certs from each host should be added to truststore for Ambari. Follow these 
steps ...

2. 1. Run ambari-server setup-security
2. Select 4 for Import certificate to truststore.
3. Respond y to Do you want to import a certificate into truststore?
4. Enter your TrustStore type. Your options are jks, jceks, or pks12.
5. Enter the path to your TrustStore file.
6. Enter the password for your TrustStore and then re-enter to confirm. The 
password must be at least 6 characters long. (Note : the last three steps are 
only required the first time the truststore is configured for Ambari)
7. Enter an alias for the certificate (usually the cert hostname).
8. Enter the path to the server certificate file.
9. Repeat for each cert being added.


Diffs
-----

  ambari-server/src/main/python/ambari-server.py 19b7138 
  ambari-server/src/main/python/ambari_server/setupHttps.py fb0f725 
  ambari-server/src/test/python/TestAmbariServer.py 4e5d044 

Diff: https://reviews.apache.org/r/35681/diff/


Testing
-------

Manual test.

Updated unit tests.

mvn clean test

all pass

[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 45:39 min
[INFO] Finished at: 2015-06-19T20:33:44-04:00
[INFO] Final Memory: 56M/1615M
[INFO] ------------------------------------------------------------------------


Thanks,

Tom Beerbower

Reply via email to