Sailesh Mukil has posted comments on this change. Change subject: rpc: allow using encrypted private key for SSL ......................................................................
Patch Set 1: > For Kudu's usage, we're a little less interested in this > specifically and more interested in the ability to programatically > pass in our new 'Key' and 'Cert' wrappers into the RPC system. That > is being done in this WIP patch: > https://gerrit.cloudera.org/#/c/5808/ > > After the above is complete, I think it's a matter of hooking up > some code which can load a password-protected key into an internal > 'Key' object. > > I'm guessing you're asking about this from the Impala perspective - > I guess the question I'd have in response is whether you are > planning on pulling a new snapshot of krpc in the near term, or > continuing to work off the most recent snapshot you have? Because a > few of these security-related APIs are very much in flux right now. We will be pulling in a newer version then the one we're working with right now, but we will probably not get the latest snapshot so as to avoid having some of the security features incomplete. We will probably cherry-pick what's necessary after that for the near-term. For eg: We will probably not be requiring the WIP patch mentioned (https://gerrit.cloudera.org/#/c/5808/), but will probably cherry-pick this patch when it goes in. But again, this is short term, and in the near future, we probably will go back to KRPC as it will be at that point. -- To view, visit http://gerrit.cloudera.org:8080/5692 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: comment Gerrit-Change-Id: Iedf60251d9212c0c135db00902c00119c9d8849c Gerrit-PatchSet: 1 Gerrit-Project: kudu Gerrit-Branch: master Gerrit-Owner: Todd Lipcon <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: Kudu Jenkins Gerrit-Reviewer: Sailesh Mukil <[email protected]> Gerrit-Reviewer: Tidy Bot Gerrit-Reviewer: Todd Lipcon <[email protected]> Gerrit-HasComments: No
