Attila Bukor has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/17731 )
Change subject: KUDU-1921 Add ability to require auth/encryption to C++ client ...................................................................... KUDU-1921 Add ability to require auth/encryption to C++ client Kudu servers support requiring authentication and encryption to be enabled, and clients prefer connecting in a secure way, but if a server doesn't support authentication and/or encryption, the client will silently connect insecurely, which can lead to a downgrade attack. With this patch, clients can require authentication and encryption to be set using the client API, where if such an attack is attempted, the client will fail to connect to the cluster. Change-Id: Ia3e800eb7c4e2f8787f0adf1f040d47358d29320 Reviewed-on: http://gerrit.cloudera.org:8080/17731 Tested-by: Kudu Jenkins Reviewed-by: Alexey Serbin <[email protected]> --- M src/kudu/client/client.cc M src/kudu/client/client.h M src/kudu/client/client_builder-internal.cc M src/kudu/client/client_builder-internal.h M src/kudu/integration-tests/security-itest.cc M src/kudu/rpc/client_negotiation.cc M src/kudu/rpc/client_negotiation.h M src/kudu/rpc/messenger.cc M src/kudu/rpc/messenger.h M src/kudu/rpc/negotiation-test.cc M src/kudu/rpc/negotiation.cc M src/kudu/rpc/negotiation.h M src/kudu/rpc/reactor.cc M src/kudu/rpc/server_negotiation.cc M src/kudu/rpc/server_negotiation.h 15 files changed, 192 insertions(+), 19 deletions(-) Approvals: Kudu Jenkins: Verified Alexey Serbin: Looks good to me, approved -- To view, visit http://gerrit.cloudera.org:8080/17731 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: Ia3e800eb7c4e2f8787f0adf1f040d47358d29320 Gerrit-Change-Number: 17731 Gerrit-PatchSet: 10 Gerrit-Owner: Attila Bukor <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241)
