Uploaded image for project: 'IMPALA'
  1. IMPALA
  2. IMPALA-3870

Impala cannot validate the SSL hostname provided in the SubjectAltName field in the certificate

    XMLWordPrintableJSON

    Details

      Description

      Hostnames provided in "Subject Alternative Name" field in certificates are not used for validation so validating fails when subjectAltName is used.

      Error returned from impala-shell when using --ca_cert:

      Error connecting: TTransportException, Hostname we connected to "XXXX" doesn't match certificate provided commonName "XXXX"

      It would be nice to support this. Although there is workaround:

      • for impala: not using --ca_cert in impala-shell
      • for hue: set 'impala.ssl.validate' to False

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              valtri František Dvořák
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: