[IMPALA-2143] Avoid impala-shell sending password in plain text with ssl enabled

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Impala 2.2
• Fix Version/s: Impala 2.3.0
• Component/s: Clients
• Labels: shell
• Target Version: Impala 2.3.0
• Assignee: Henry Robinson
• Reporter: Bharath Vissapragada
• Created: 16/Jul/15 13:29
• Updated: 28/Dec/15 17:43
• Resolved: 30/Jul/15 16:07

Description

In an SSL enabled impala cluster, if the client misses --ssl flag in impala-shell, password is sent in plain text since we open a TSocket instead of TSSLsocket [1]

[1] https://github.com/cloudera/Impala/blob/cdh5-trunk/shell/impala_client.py#L256