>From Hussain Towaileb <[email protected]>:

Hussain Towaileb has submitted this change. ( 
https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/19471 )

Change subject: [NO ISSUE][NET] Only use client certificates if configured
......................................................................

[NO ISSUE][NET] Only use client certificates if configured

Change-Id: Id46266849ded6d0ea632293e829aed78396e1ea2
Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/19471
Integration-Tests: Jenkins <[email protected]>
Reviewed-by: Michael Blow <[email protected]>
Tested-by: Michael Blow <[email protected]>
---
M 
hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java
1 file changed, 15 insertions(+), 1 deletion(-)

Approvals:
  Michael Blow: Looks good to me, approved; Verified
  Jenkins: Verified




diff --git 
a/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java
 
b/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java
index d8f5cff..7a0e482 100644
--- 
a/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java
+++ 
b/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java
@@ -53,7 +53,8 @@
     @Override
     public SSLEngine newSSLEngine(boolean clientMode) {
         try {
-            SSLEngine sslEngine = newSSLContext(clientMode).createSSLEngine();
+            boolean useClientCerts = clientMode && config.useMutualAuth();
+            SSLEngine sslEngine = 
newSSLContext(useClientCerts).createSSLEngine();
             sslEngine.setUseClientMode(clientMode);
             return sslEngine;
         } catch (Exception ex) {

--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/19471
To unsubscribe, or for help writing mail filters, visit 
https://asterix-gerrit.ics.uci.edu/settings

Gerrit-Project: asterixdb
Gerrit-Branch: master
Gerrit-Change-Id: Id46266849ded6d0ea632293e829aed78396e1ea2
Gerrit-Change-Number: 19471
Gerrit-PatchSet: 4
Gerrit-Owner: Ian Maxon <[email protected]>
Gerrit-Reviewer: Anon. E. Moose #1000171
Gerrit-Reviewer: Hussain Towaileb <[email protected]>
Gerrit-Reviewer: Ian Maxon <[email protected]>
Gerrit-Reviewer: Jenkins <[email protected]>
Gerrit-Reviewer: Michael Blow <[email protected]>
Gerrit-MessageType: merged

Reply via email to