Todd Lipcon has posted comments on this change.

Change subject: security: generate certs on the tserver, sign them on the master
......................................................................


Patch Set 5:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/5766/5/src/kudu/security/server_cert_manager.cc
File src/kudu/security/server_cert_manager.cc:

PS5, Line 33: server
> on second thought, what do you think about 'rpc'?  I think that distinguish
I was pondering whether this cert may also want to end up as a self-signed cert 
in the webserver so people can have encryption by default (vs making their own 
self-signed cert). I know you think encryption without authentication is 
useless but... :)

Anyway I marked it experimental so we're free to come back and rename it until 
we decide it's good. Let's wait until the end and then do a once-over of all 
config and see where names can be made more consistent?


-- 
To view, visit http://gerrit.cloudera.org:8080/5766
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I3eb8ab4edc17e2fa1a54e0123a06dabc59a0489b
Gerrit-PatchSet: 5
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Todd Lipcon <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Dan Burkert <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <[email protected]>
Gerrit-HasComments: Yes

Reply via email to