[CALCITE-1538] Support truststore and truststore password client options on JDBC driver

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: avatica-1.10.0
• Component/s: avatica
• Assignee: Josh Elser
• Reporter: Josh Elser
• Created: 14/Dec/16 02:52
• Updated: 04/Mar/18 23:10
• Resolved: 29/Dec/16 20:34

Description

I've been poking around with placing Knox in front of Avatica to get some of the nice features it provides (wire security, various forms of authentication, auditing).

The only thing I had to change to actually get this working was to allow a custom truststore to be provided because the test instance of Knox I had was using a self-signed SSL cert (which would obviously not work by default). This would likely be a not-uncommon scenario, so it would be good to get that support in now.

Issue Links

• relates to: CALCITE-1480 Support specifying ciphersuites and algorithms for TLS
• links to: PR