[prev in list] [next in list] [prev in thread] [next in thread] 

List:       flume-dev
Subject:    [jira] [Created] (FLUME-3063) Avro sink connection failure when challenged with an SSL SNI
From:       "David Lund (JIRA)" <jira () apache ! org>
Date:       2017-02-28 17:03:45
Message-ID: JIRA.13047027.1488301415000.20286.1488301425586 () Atlassian ! JIRA
[Download RAW message or body]

David Lund created FLUME-3063:
---------------------------------

             Summary: Avro sink connection failure when challenged with an SSL SNI
                 Key: FLUME-3063
                 URL: https://issues.apache.org/jira/browse/FLUME-3063
             Project: Flume
          Issue Type: Bug
          Components: Sinks+Sources
    Affects Versions: v1.7.0
            Reporter: David Lund
            Priority: Minor


I actually found this in version 1.6.0 but i've checked the code for 1.7.0 and is \
still present

When using an avro sink connecting to a SSL avro endpoint - if the SSL handshake \
requests an SNI challenge the connection fails. This is down to the line \
org.apache.flume.api.NettyAvroRpcClient:753: {code:java}
SSLEngine sslEngine = sslContext.createSSLEngine();
{code}


In order for an SNI challenge to succeed - the hostname and port must be passed in
{code:java}
SSLEngine sslEngine = sslContext.createSSLEngine(hostname,port);
{code}

I've done a quick hack at this - and the values address.getHostname() and \
address.getPort() passed through within the connect(...) method when creating \
SSLCompressionChannelFactory fixes the problem 



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)


[prev in list] [next in list] [prev in thread] [next in thread]