Hello Adar Dembo, Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/6356
to look at the new patch set (#7).
Change subject: KUDU-1927 [master] always send IPKI CA certificate
......................................................................
KUDU-1927 [master] always send IPKI CA certificate
A master server always sends back Kudu IPKI CA certificate and valid
authn token with successful response to the ConnectToCluster RPC if it
claims it is the leader.
This patch fixes potential race between responding to client's
ConnectToCluster RPC call and loading Kudu CA certificate from the
system table. Prior to this fix it was possible for a Kudu client to
successfully connect to the Kudu cluster, but receive no CA certificate
or get no authn token or an authn token signed by an expired TSK from
a master server which claims it's the leader master server.
Change-Id: Ib9a20e6da6531091fcc597af58a7bbf01a8847f5
---
M src/kudu/client/client.h
M src/kudu/client/master_rpc.cc
M src/kudu/integration-tests/master_cert_authority-itest.cc
M src/kudu/master/catalog_manager.cc
M src/kudu/master/master_service.cc
5 files changed, 197 insertions(+), 30 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/56/6356/7
--
To view, visit http://gerrit.cloudera.org:8080/6356
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ib9a20e6da6531091fcc597af58a7bbf01a8847f5
Gerrit-PatchSet: 7
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Adar Dembo <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: David Ribeiro Alves <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Todd Lipcon <[email protected]>
