[
https://issues.apache.org/jira/browse/IMPALA-12559?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17846970#comment-17846970
]
ASF subversion and git services commented on IMPALA-12559:
----------------------------------------------------------
Commit 7550eb607c2b92b1367dc5cf5667b681d59a8915 in impala's branch
refs/heads/master from wzhou-code
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=7550eb607 ]
IMPALA-12559 (part 2): Fix build issue for different versions of openssl
Previous patch calls OpenSSL API X509_get0_tbs_sigalg() which is not
available in the version of OpenSSL in ToolChain. It causes build
failures.
This patch fixes the issue by calling X509_get_signature_nid().
Testing:
- Passed jwt-test unit-test and end-end unit-test.
Change-Id: I62b9f0c00f91c2b13be30c415e3f1ebd0e1bd2bc
Reviewed-on: http://gerrit.cloudera.org:8080/21432
Reviewed-by: gaurav singh <gsi...@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
Reviewed-by: Abhishek Rawat <ara...@cloudera.com>
> Support x5c Parameter in JSON Web Keys (JWK)
> --------------------------------------------
>
> Key: IMPALA-12559
> URL: https://issues.apache.org/jira/browse/IMPALA-12559
> Project: IMPALA
> Issue Type: Bug
> Components: be, Security
> Reporter: Jason Fehr
> Assignee: gaurav singh
> Priority: Critical
> Labels: JWT, jwt, security
>
> The ["x5u"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.6],
> ["x5c"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.7],
> ["x5t"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.8], and
> ["x5t#S256|https://datatracker.ietf.org/doc/html/rfc7517#section-4.9]
> parameters in JWKs is not supported by Impala. Implement support for this
> parameter using the available methods in the [Thalhammer/jwt-cpp
> library|https://github.com/Thalhammer/jwt-cpp/blob/ce1f9df3a9f861d136d6f0c93a6f811c364d1d3d/example/jwks-verify.cpp].
> Note: If the "alg" property is specified and so is "x5u" or "x5c", then the
> value of the "alg" property must match the algorithm on the certificate from
> the "x5u" or "x5c" property.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
