I was lurking around in the Accumulo monitor code and Jetty code to understand 
this.  One thing I noticed in the Jetty code is that if the truststore is not 
set, then it will use the keystore as the truststore.  So one possible option 
is we require both truststore path and password are set OR no truststore props 
are set.  When nothing is set for the truststore, then we don't set anything on 
Jetty's SslConnectionFactory for truststore and it falls back to the keystore.

I think an issue needs to be opened about the monitor falling back to http if 
https config is present but incorrect.  The monitor should probably fail to 
start.

[ Full content available at: https://github.com/apache/accumulo/pull/646 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to