Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1288

Add SSL enabled MySQL support in Ranger Admin

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.7.0
    • 0.7.0
    • Ranger
    • None

    Description

      Problem Statement : Ranger can not communicate to ssl enabled MySQL server

      Associated error message : Ranger DB script fails to communicate with the DB with sql AccessContronlException.

      Proposed Solution : JDBC connection string could be : "jdbc:mysql://127.0.0.1:3306/ranger?verifyServerCertificate=false&useSSL=true&requireSSL=true".
      The 'useSSL=true' property is added to the JDBC URL to attempt to communicate via SSL.
      The 'verifyServerCerticate=false' property is set to bypass certificate validation.
      The 'requireSSL=true' property is set to refuse to connect if the MySQL server does not support SSL. If user want to connect using truststore then he can configure truststore files(certificate information for the mysql server and client both).
      Ranger application and jisql utility should know from where to pick the certificates which can be set in System properties like this :
      -Djavax.net.ssl.keyStore=path_to_keystore_file
      -Djavax.net.ssl.keyStorePassword=password
      -Djavax.net.ssl.trustStore=path_to_truststore_file
      -Djavax.net.ssl.trustStorePassword=password

      Attachments

        1. RANGER-1288-1.patch
          48 kB
          Pradeep Agrawal

        Issue Links

          Activity

            People

              pradeep Pradeep Agrawal
              pradeep Pradeep Agrawal
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: