[HDDS-2020] Remove mTLS from Ozone GRPC

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.5.0
• Labels: pull-request-available
• Target Version/s: 0.4.1
• Assignee: Xiaoyu Yao
• Reporter: Xiaoyu Yao
• Created: 22/Aug/19 23:35
• Updated: 24/Feb/20 20:53
• Resolved: 03/Oct/19 23:34

Description

Generic GRPC support mTLS for mutual authentication. However, Ozone has built in block token mechanism for server to authenticate the client. We only need TLS for client to authenticate the server and wire encryption. 

Remove the mTLS support also simplify the GRPC server/client configuration.

Issue Links

• relates to: HDDS-1946 CertificateClient should not persist keys/certs to ozone.metadata.dir
• relates to: RATIS-669 Allow Ratis gRPCTlsConfig to take Java Key/Cert Object in addition to File
• links to: GitHub Pull Request #1369
• links to: GitHub Pull Request #1524