Thomas Marshall has posted comments on this change. ( http://gerrit.cloudera.org:8080/11376 )
Change subject: IMPALA-7519: Support elliptic curve ssl ciphers ...................................................................... Patch Set 5: (6 comments) http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc File be/src/rpc/thrift-server.cc: http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc@368 PS4, Line 368: SCOPED_OPENSSL_NO_PENDING_ERRORS; > Any reason not to use SCOPED_OPENSSL_NO_PENDING_ERRORS in the method prelud Done http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc@376 PS4, Line 376: if (ecdh == nullptr) { > This check should not be necessary, since EC_KEY_new_by_curve_name returns Done http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc@381 PS4, Line 381: int rc = SSL_CTX_set_tmp_ecdh(ctx_->get(), ecdh.get()); > It may be helpful to append the GetOpenSSLErrors() string to this message. Done http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc@385 PS4, Line 385: } > similarly, this check should not be necessary since SSL_CTX_set_tmp_ecdh re Done http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc@390 PS4, Line 390: if (rc <= 0) { > similarly, it would probably be useful to add error strings to this message Done http://gerrit.cloudera.org:8080/#/c/11376/4/be/src/rpc/thrift-server.cc@396 PS4, Line 396: } > likewise Done -- To view, visit http://gerrit.cloudera.org:8080/11376 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I1666ceabec51b425e8a82be1cf519e2ac35fa5a6 Gerrit-Change-Number: 11376 Gerrit-PatchSet: 5 Gerrit-Owner: Thomas Marshall <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Thomas Marshall <[email protected]> Gerrit-Reviewer: Tim Armstrong <[email protected]> Gerrit-Comment-Date: Fri, 21 Sep 2018 16:46:46 +0000 Gerrit-HasComments: Yes
