Dan Burkert has posted comments on this change. Change subject: [security] use 512 bit RSA keys for TSK in tests ......................................................................
Patch Set 1: (3 comments) http://gerrit.cloudera.org:8080/#/c/6194/1/src/kudu/integration-tests/external_mini_cluster.cc File src/kudu/integration-tests/external_mini_cluster.cc: Line 1021: // Generate smaller RSA keys for tests. We are using strong/high TLS v1.2 > what about the external tablet server? this is just the master It should only be necessary on the master. Line 1026: flags.push_back("--tsk_num_rsa_bits=512"); Also need to add an equivalent in the Java ExternalMiniCluster http://gerrit.cloudera.org:8080/#/c/6194/1/src/kudu/security/token_signer.cc File src/kudu/security/token_signer.cc: Line 39: DEFINE_int32(tsk_num_rsa_bits, 2048, Could you also mark this flag experimental while you are here? -- To view, visit http://gerrit.cloudera.org:8080/6194 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: comment Gerrit-Change-Id: I180908763a1c520d8a6d8bbaaf981add9396db99 Gerrit-PatchSet: 1 Gerrit-Project: kudu Gerrit-Branch: master Gerrit-Owner: Alexey Serbin <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: David Ribeiro Alves <[email protected]> Gerrit-Reviewer: Kudu Jenkins Gerrit-Reviewer: Todd Lipcon <[email protected]> Gerrit-HasComments: Yes
