[HBASE-12984] SSL cannot be used by the InfoPort after removing deprecated code in HBASE-10336

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 1.0.0, 1.1.0, 2.0.0
• Fix Version/s: 1.0.0, 1.1.0
• Hadoop Flags: Reviewed
• Assignee: Esteban Gutierrez
• Reporter: Esteban Gutierrez
• Created: 07/Feb/15 07:01
• Updated: 06/Apr/18 17:54
• Resolved: 10/Feb/15 00:48

Description

Setting hbase.ssl.enabled to true doesn't enable SSL on the InfoServer. Found that the problem is down the InfoServer and HttpConfig in how we setup the protocol in the HttpServer:

for (URI ep : endpoints) {
        Connector listener = null;
        String scheme = ep.getScheme();
 if ("http".equals(scheme)) {
          listener = HttpServer.createDefaultChannelConnector();
        } else if ("https".equals(scheme)) {
          SslSocketConnector c = new SslSocketConnectorSecure();
          c.setNeedClientAuth(needsClientAuth);
          c.setKeyPassword(keyPassword);

It depends what end points have been added by the InfoServer:

builder
      .setName(name)
      .addEndpoint(URI.create("http://" + bindAddress + ":" + port))
      .setAppDir(HBASE_APP_DIR).setFindPort(findPort).setConf(c);

Basically we always use http and we don't look via HttConfig if hbase.ssl.enabled was set to true and we assign the right schema based on the configuration.