[ACCUMULO-1009] Support encryption over the wire

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.0
• Component/s: client, master, monitor, tserver
• Assignee: Michael Berman
• Reporter: Keith Turner
• Created: 30/Jan/13 20:06
• Updated: 19/Jan/15 21:08
• Resolved: 19/Nov/13 19:58

Description

Need to support encryption between ACCUMULO clients and servers. Also need to encrypt communications between server and servers.

Basically need to make it possible for users to enable SSL+thrift.

Issue Links

• breaks: ACCUMULO-3496 ZooKeeperInstance doesn't validate instance name on creation
• is duplicated by: ACCUMULO-2076 Make it easier to connect to acccumulo
• is duplicated by: ACCUMULO-793 Look into using SSL connections
• is related to: ACCUMULO-1726 Typed configuration framework

Sub-Tasks

• Add SSL support to proxy: Resolved
• Add SSL flag to registry in ZK and fail fast if you connect with the wrong settings: Resolved
• ThriftTransport pool does not include ssl options in cache key: Resolved
• Provide tool for assisting cert provisioning across tserver cluster: Resolved
• Create integration test for proxy running over SSL: Resolved