[DRILL-6581] Improve C++ Client SSL Implementation

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.0
• Fix Version/s: 1.14.0
• Component/s: Client - C++
• Labels: ready-to-commit
• Assignee: Rob Wu
• Reporter: Rob Wu
• Reviewer: Sorabh Hamirwasia
• Created: 05/Jul/18 22:34
• Updated: 13/Jul/18 03:48
• Resolved: 13/Jul/18 03:48

Description

1. Fix: Hostname verification doesnt function as expected: Host and port in the ssl hostname verification callback is always empty.
2. Fix: Certificate load verification exceptions are swallowed and not propagated.
3. Improvement: SSL V3 is not disabled.
4. Improvement: Hostname verification failure exception is the same as other certificate verification failures, we should separate them
5. Improvement: Create individual error messages to allow error handling of the application using the client and follows the standard of the rest of the errors
6. Improvement: Add SSL Hostname verification with zookeeper connection mode support
7. Added support for custom SSL CTX Options

Issue Links

• is a parent of: DRILL-6586 Add SSL Hostname verification with zookeeper connection mode support
• is a parent of: DRILL-6587 Add support for custom SSL CTX Options
• links to: GitHub Pull Request #1366