[
https://issues.apache.org/jira/browse/IMPALA-12816?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17817821#comment-17817821
]
ASF subversion and git services commented on IMPALA-12816:
----------------------------------------------------------
Commit ac5ed0f84946203b165ae68c265fb1de59ad62a9 in impala's branch
refs/heads/master from Andrew Sherman
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=ac5ed0f84 ]
IMPALA-12816: Remove exclusion of Netty to allow SSL connections to HBase
It is possible to configure Impala to use SSL when connecting to HBase.
Under the covers, an HBase client connection also has a connection to
ZooKeeper. SSL connections to ZooKeeper require Netty. Netty has been
excluded from Impala’s classpath since IMPALA-9648 because of earlier
security problems. IMPALA-9648 says that we need to be at least at
version 4.1.44 of Netty and we now pull in 4.1.86. To allow use of SSL
with HBase, remove the exclusion of Netty.
TESTING:
Ran end-to-end tests.
Ran queries against HBase configured to use SSL in a Cloudera
deployment.
Change-Id: Ic3038369345ca74f01ce2d4248c5beb21b633b2b
Reviewed-on: http://gerrit.cloudera.org:8080/21034
Reviewed-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
> Remove exclusion of Netty to allow SSL connections to HBase.
> ------------------------------------------------------------
>
> Key: IMPALA-12816
> URL: https://issues.apache.org/jira/browse/IMPALA-12816
> Project: IMPALA
> Issue Type: Bug
> Affects Versions: Impala 4.4.0
> Reporter: Andrew Sherman
> Assignee: Andrew Sherman
> Priority: Critical
>
> It is possible to configure Impala to use SSL when connecting to Hbase. Under
> the covers, an HBase client connection also has a connection to ZooKeeper.
> SSL connections to ZooKeeper require Netty. Netty has been excluded from
> Impala’s classpath since IMPALA-9648 because of earlier security problems.
> IMPALA-9648 says that we need to be at least at version 4.1.44 of Netty and
> we now pull in 4.1.86. To allow use of SSL with HBase, remove the exclusion
> of Netty.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
