[
https://issues.apache.org/jira/browse/IMPALA-15007?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18115925#comment-18115925
]
ASF subversion and git services commented on IMPALA-15007:
----------------------------------------------------------
Commit 099d6319a26d6613eedfade39d54aacddd0e9a1d in impala's branch
refs/heads/master from Csaba Ringhofer
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=099d6319a ]
IMPALA-15007: Set verify_cert=True by default in impala-shell
If --ssl is set, but --ca_cert is not, verify the server by
default using system openssl certificates. Can be turned off
with --no_verify_cert.
This is an intentional breaking change for Impala(shell) 5.0.
Assisted-By: Claude Opus 4.8
Change-Id: I8bd07c841fa4a78b9d05a07f73456dd08bdce724
Reviewed-on: http://gerrit.cloudera.org:8080/24823
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Set impala-shell verify_cert=True by default
> --------------------------------------------
>
> Key: IMPALA-15007
> URL: https://issues.apache.org/jira/browse/IMPALA-15007
> Project: IMPALA
> Issue Type: Improvement
> Components: Clients
> Affects Versions: impala-shell 4.6.0
> Reporter: Michael Smith
> Assignee: Csaba Ringhofer
> Priority: Major
> Labels: impala-shell, security
>
> IMPALA-14988 added the {{verify_cert}} option to verify server certs against
> system CA certs. Switch the default to {{verify_cert=True}} so that when
> {{{}use_ssl=True{}}}, the default behavior is to verify certs. If the server
> certificate is not recognized by system CAs, options are then to provide one
> via {{ca_cert}} or set {{verify_cert=False}} for insecure mode.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
