Accumulo
  1. Accumulo
  2. ACCUMULO-2032

GC doesn't respect instance SSL configuration

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.6.0
    • Component/s: gc
    • Labels:
      None

      Description

      looks like the GC is starting up an unencrypted THsHaServer regardless of the instance.rpc.ssl.enabled config property. then it traces a constant stream of ERROR: Read an invalid frame size of -2140274429. Are you using TFramedTransport on the client side? because the monitor is trying to connect over SSL as configured.

      this used to work, but maybe got lost in some GC refactor? i'm also looking into getting this case covered by automated tests.

        Activity

        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open In Progress In Progress
        5s 1 Michael Berman 16/Dec/13 21:25
        In Progress In Progress Resolved Resolved
        22d 22h 20m 1 John Vines 08/Jan/14 19:45
        Hide
        ASF subversion and git services added a comment -

        Commit 133e90a3c61aace351be7ab447446c9c6ea6b4f0 in branch refs/heads/master from Michael Berman
        [ https://git-wip-us.apache.org/repos/asf?p=accumulo.git;h=133e90a ]

        ACCUMULO-2032: make GC serve SSL when SSL is turned on. also remove the entrypoint that allowed you to create a thrift server without thinking about SSL.

        Show
        ASF subversion and git services added a comment - Commit 133e90a3c61aace351be7ab447446c9c6ea6b4f0 in branch refs/heads/master from Michael Berman [ https://git-wip-us.apache.org/repos/asf?p=accumulo.git;h=133e90a ] ACCUMULO-2032 : make GC serve SSL when SSL is turned on. also remove the entrypoint that allowed you to create a thrift server without thinking about SSL.
        John Vines made changes -
        Status In Progress [ 3 ] Resolved [ 5 ]
        Resolution Fixed [ 1 ]
        Hide
        ASF subversion and git services added a comment -

        Commit 133e90a3c61aace351be7ab447446c9c6ea6b4f0 in branch refs/heads/1.6.0-SNAPSHOT from Michael Berman
        [ https://git-wip-us.apache.org/repos/asf?p=accumulo.git;h=133e90a ]

        ACCUMULO-2032: make GC serve SSL when SSL is turned on. also remove the entrypoint that allowed you to create a thrift server without thinking about SSL.

        Show
        ASF subversion and git services added a comment - Commit 133e90a3c61aace351be7ab447446c9c6ea6b4f0 in branch refs/heads/1.6.0-SNAPSHOT from Michael Berman [ https://git-wip-us.apache.org/repos/asf?p=accumulo.git;h=133e90a ] ACCUMULO-2032 : make GC serve SSL when SSL is turned on. also remove the entrypoint that allowed you to create a thrift server without thinking about SSL.
        Hide
        Michael Berman added a comment -

        The patch should be good, although I haven't checked to see if the code has drifted at all in any way that might make applying it hard. I forgot about writing tests over the holidays...I'll try to get to that later this week.

        Show
        Michael Berman added a comment - The patch should be good, although I haven't checked to see if the code has drifted at all in any way that might make applying it hard. I forgot about writing tests over the holidays...I'll try to get to that later this week.
        Hide
        Josh Elser added a comment -

        Michael Berman did you ever get some tests worked up for this? Is the patch you attached here still good for fixing the deficiency in this ticket?

        Show
        Josh Elser added a comment - Michael Berman did you ever get some tests worked up for this? Is the patch you attached here still good for fixing the deficiency in this ticket?
        Hide
        Eric Newton added a comment -

        i'm also looking into getting this case covered by automated tests.

        You took the words right out of my mouth. Thanks!

        Show
        Eric Newton added a comment - i'm also looking into getting this case covered by automated tests. You took the words right out of my mouth. Thanks!
        Michael Berman made changes -
        Michael Berman made changes -
        Field Original Value New Value
        Status Open [ 1 ] In Progress [ 3 ]
        Michael Berman created issue -

          People

          • Assignee:
            Michael Berman
            Reporter:
            Michael Berman
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development