[FLINK-3931] Implement Transport Encryption (SSL/TLS)

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: Runtime / Coordination
• Labels: security
• Assignee: Eron Wright
• Reporter: Eron Wright
• Created: 18/May/16 21:00
• Updated: 19/Mar/19 21:49
• Resolved: 19/Mar/19 21:49

Description

This issue is part of a series of improvements detailed in the Secure Data Access design doc.

To assure privacy and data integrity between Flink components, enable TLS for all communication channels. As described in the design doc:

• Accept a configured certificate or generate a certificate.
• Enable Akka SSL
• Implement Data Transfer SSL
• Implement Blob Server SSL
• Implement Web UI HTTPS

Issue Links

• incorporates: FLINK-4918 Add SSL support to Mesos artifact server
• links to: GitHub Pull Request #2518
• links to: PR

Sub-Tasks

• Enable Akka SSL: Resolved
• Implement Web UI HTTPS: Resolved
• Implement Data Transfer SSL: Resolved
• Implement Blob Server SSL: Resolved
• Implement KvState SSL: Resolved
• Support hostname verification: Resolved
• Implement SSL file-shipping: Resolved