Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-1288

Add SSL enabled MySQL support in Ranger Admin

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 0.7.0
    • 0.7.0
    • Ranger
    • None

    Description

      Problem Statement : Ranger can not communicate to ssl enabled MySQL server

      Associated error message : Ranger DB script fails to communicate with the DB with sql AccessContronlException.

      Proposed Solution : JDBC connection string could be : "jdbc:mysql://127.0.0.1:3306/ranger?verifyServerCertificate=false&useSSL=true&requireSSL=true".
      The 'useSSL=true' property is added to the JDBC URL to attempt to communicate via SSL.
      The 'verifyServerCerticate=false' property is set to bypass certificate validation.
      The 'requireSSL=true' property is set to refuse to connect if the MySQL server does not support SSL. If user want to connect using truststore then he can configure truststore files(certificate information for the mysql server and client both).
      Ranger application and jisql utility should know from where to pick the certificates which can be set in System properties like this :
      -Djavax.net.ssl.keyStore=path_to_keystore_file
      -Djavax.net.ssl.keyStorePassword=password
      -Djavax.net.ssl.trustStore=path_to_truststore_file
      -Djavax.net.ssl.trustStorePassword=password

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            pradeep Pradeep Agrawal
            pradeep Pradeep Agrawal
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment