Alexey Serbin has uploaded a new change for review.

  http://gerrit.cloudera.org:8080/6356

Change subject: KUDU-1927 [master] always send IPKI CA certificate
......................................................................

KUDU-1927 [master] always send IPKI CA certificate

The leader master always sends back Kudu IPKI CA certificate and valid
authn token with successful response to the ConnectToCluster RPC.

This patch fixes potential race between responding to client's
ConnectToCluster RPC call and loading Kudu CA certificate from the
system table. Prior to this fix it was possible for a Kudu client to
successfully connect to the Kudu cluster, but receive no CA certificate
or get an authn token signed by an expired TSK.

Change-Id: Ib9a20e6da6531091fcc597af58a7bbf01a8847f5
---
M src/kudu/client/client.h
M src/kudu/client/master_rpc.cc
M src/kudu/integration-tests/master_cert_authority-itest.cc
M src/kudu/master/catalog_manager.cc
M src/kudu/master/master_service.cc
5 files changed, 162 insertions(+), 10 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/56/6356/1
-- 
To view, visit http://gerrit.cloudera.org:8080/6356
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib9a20e6da6531091fcc597af58a7bbf01a8847f5
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <[email protected]>

Reply via email to