huangtianhua...@gmail.com has posted comments on this change. (
http://gerrit.cloudera.org:8080/15554 )
Change subject: [python] KUDU-3087 use 2048-bit RSA keys for CA and server certs
......................................................................
Patch Set 2:
Alexey Serbin, I took two test on my aarch64 instance again, there are two ways
that the python tests can pass:
First, modify the key size to 1024, like:
{ "numMasters" : cls.NUM_MASTER_SERVERS,
"numTservers" : cls.NUM_TABLET_SERVERS,
"extraMasterFlags" : [
"--default_num_replicas=1",
"--ipki_ca_key_size=1024",
"--ipki_server_key_size=1024" ],
"extraTserverFlags" : [ "--ipki_server_key_size=1024" ]}})
Second, modify key size to 2048 and take "openssl_security_level_override=2"
also:
{ "numMasters" : cls.NUM_MASTER_SERVERS,
"numTservers" : cls.NUM_TABLET_SERVERS,
"extraMasterFlags" : [
"--default_num_replicas=1",
"--ipki_ca_key_size=2048",
"--ipki_server_key_size=2048",
"--openssl_security_level_override=2" ],
"extraTserverFlags" : [ "--ipki_server_key_size=2048" ,
"--openssl_security_level_override=2"]}})
--
To view, visit http://gerrit.cloudera.org:8080/15554
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I740d81291832bfc28c395443f2c01b0c9a7dbadf
Gerrit-Change-Number: 15554
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <aser...@cloudera.com>
Gerrit-Reviewer: Adar Dembo <a...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <aser...@cloudera.com>
Gerrit-Reviewer: Anonymous Coward <huangtianhua...@gmail.com>
Gerrit-Reviewer: Grant Henke <granthe...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Wed, 25 Mar 2020 06:57:05 +0000
Gerrit-HasComments: No
