Todd Lipcon has posted comments on this change. Change subject: security: generate certs on the tserver, sign them on the master ......................................................................
Patch Set 2: (1 comment) http://gerrit.cloudera.org:8080/#/c/5766/2/src/kudu/tserver/ts_cert_manager.h File src/kudu/tserver/ts_cert_manager.h: Line 47: class TSCertManager { > I think we will want to use this class on the master as well to generate a hrm, yea, this probably will end up being more like 'server_cert_manager' or something. let me ponder how that'll look (forgot about the master getting its own TLS cert signed by itself) -- To view, visit http://gerrit.cloudera.org:8080/5766 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: comment Gerrit-Change-Id: I3eb8ab4edc17e2fa1a54e0123a06dabc59a0489b Gerrit-PatchSet: 2 Gerrit-Project: kudu Gerrit-Branch: master Gerrit-Owner: Todd Lipcon <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: Kudu Jenkins Gerrit-Reviewer: Tidy Bot Gerrit-Reviewer: Todd Lipcon <[email protected]> Gerrit-HasComments: Yes
