eoinmcdonnell113 opened a new pull request, #1119:
URL: https://github.com/apache/ranger/pull/1119
## What changes were proposed in this pull request?
RANGER-5715: Improve HTTPS keystore startup logging
When Ranger Admin HTTPS fails to start due to TLS/keystore misconfiguration
(for example a missing or incorrect keystore key alias), the existing logs are
often misleading and can point operators to unrelated properties such as
`ranger.externalurl`.
This change adds HTTPS keystore validation during `EmbeddedServer` startup
and emits clear ERROR logs when:
- the keystore file is missing/unreadable
- the keystore password cannot be resolved or is incorrect
- the configured key alias is missing
- the alias is not a private-key entry required for HTTPS
The logs identify the relevant config properties and note that the HTTPS
connector/UI may be unavailable, without exposing secrets.
Primary change: `embeddedwebserver/.../EmbeddedServer.java`
## How was this patch tested?
- Local unit verification of the new HTTPS keystore validation paths
(missing file, incorrect password, missing alias, unresolved password)
- Local isolated Docker HTTPS bad-alias startup test confirmed the expected
ERROR log, for example:
`HTTPS configuration validation failed: Keystore key alias [missing-alias]
was not found in keystore [...]. Check
'ranger.service.https.attrib.keystore.keyalias'.`
- No UI changes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
