[I] Drill Embedded with TLS: Impossible? (drill)

[via GitHub]

thinkORo opened a new issue, #2816:
URL: https://github.com/apache/drill/issues/2816

   **Describe the bug**
   To secure the communication between client and server, drill-embedded is to 
be configured with TLS. Following the instructions on the website 
(https://drill.apache.org/docs/configuring-ssl-tls-for-encryption/) I always 
get the error message: `Error: Failure in connecting to Drill: 
org.apache.drill.exec.rpc.RpcException: CONNECTION : 
io.netty.channel.AbstractChannel$AnnotatedConnectException: Connection refused: 
localhost/127.0.0.1:31010 (state=,code=0)`
   
   **To Reproduce**
   Steps to reproduce the behavior:
   1. Download Apache Drill from Drill website
   2. Create keystore.jks and truststore.jks via `keytool`
   3. Create drill-override.conf (see "Additional context" below)
   4. Start drill-embedded with required "-u" JDBC parameter to define TLS (see 
"Additional context" below)
   5. See error
   
   **Expected behavior**
   drill-embedded starts without any error message, sqlline interface is 
available, respective ports (8047, 31010) are bound
   
   **Error detail, log output or screenshots**
   `Error: Failure in connecting to Drill: 
org.apache.drill.exec.rpc.RpcException: CONNECTION : 
io.netty.channel.AbstractChannel$AnnotatedConnectException: Connection refused: 
localhost/127.0.0.1:31010 (state=,code=0)`
   
   **Drill version**
   1.21.1
   
   **Additional context**
   1. drill-override.conf:
   ```
   drill.exec: {
     cluster-id: "drillbits1",
     zk.connect: "localhost:2181",
     security.user.encryption.ssl.enabled: true,
     ssl: {
       protocol: "TLSv1.2",
       keyStoreType: "JKS",
       keyStorePath: "/InstallFolder/apache-drill-1.21.1/conf/keystore.jks",
       keyStorePassword: "securePasswd",
       keyPassword: "securePasswd",
       trustStoreType: "JKS",
       trustStorePath: "/InstallFolder/apache-drill-1.21.1/conf/truststore.jks"
       trustStorePassword: "securePasswd",
       provider: "JDK",
       useHadoopConfig: false
     }
   }
   ```
   2. drill-embedded:
   ```
   cd /InstallFolder/apache-drill-1.21.1
   bin/drill-embedded -u 
"jdbc:drill:schema=data.query;drillbit=localhost:31010;enableTLS=true;trustStorePath=/InstallFolder/apache-drill-1.21.1/conf/truststore.jks;trustStorePassword=securePasswd"
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@drill.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org