[IMPALA-4933] Force thrift to initialize SSL on process startup

• Type: Sub-task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: Impala 2.8.0
• Fix Version/s: Impala 2.8.0
• Component/s: Security
• Labels: kudu ssl thrift
• Assignee: Matthew Jacobs
• Reporter: Matthew Jacobs
• Created: 14/Feb/17 23:50
• Updated: 26/May/17 21:18
• Resolved: 21/Feb/17 00:01

Description

Thrift currently initializes OpenSSL lazily, when the first connection is created. However, the OpenSSL initialization must happen before the Kudu library is used (because Kudu will not be doing the initialization itself, and it will check that the OpenSSL initialization already occurred), so thrift needs to do the initialization on startup.