[ 
https://issues.apache.org/jira/browse/SLIDER-131?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14035981#comment-14035981
 ] 

Steve Loughran commented on SLIDER-131:
---------------------------------------

splitting things up makes sense
# the web UI comes via the proxy, so is secured that way
# the REST API -if we set it up to work through the proxy can go the same way 
with some SPNEGO auth.
# if we don't do that, again, security issues surface -which implies we may 
want to think about having it on its own port too.

Owen pointed out to me yesterday, as SSL certificates are host-specific only, 
not (hostname, port), to complicate things

> enable AM one and two-way SSL and test/enable agent secure comm
> ---------------------------------------------------------------
>
>                 Key: SLIDER-131
>                 URL: https://issues.apache.org/jira/browse/SLIDER-131
>             Project: Slider
>          Issue Type: Bug
>          Components: agent, appmaster
>            Reporter: Jonathan Maron
>            Assignee: Jonathan Maron
>
> AM has ssl settings enabling SSL (including 2-way).  Work through enabling 
> this feature (perhaps initially testing it with a browser that has the 
> appropriate server cert and client key), and subsequently try to ensure agent 
> can communicate with server using both SSL modes.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to