[RANGER-1990] Add One-way SSL MySQL support in Ranger Admin

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7.0
• Fix Version/s: 1.0.0
• Component/s: Ranger
• Assignee: Pradeep Agrawal
• Reporter: Pradeep Agrawal
• Created: 22/Feb/18 09:40
• Updated: 26/Feb/18 04:46
• Resolved: 26/Feb/18 04:46

Description

Problem Statement: Currently Ranger can communicate to SSL enabled MySQL server but only if 2-way SSL config is provided, Ranger should support for MySQL configured in Standard SSL(one-way) mode. 

Proposed Solution: For mutual SSL (2-way) support keystore is required, which is currently mandatory even if user want to connect to MySQL by using Standard(1-way).  Proposed solution requires changes in install.properites to have a property 'db_ssl_auth_type' which can have value '1-way' or '2-way'. Default value shall be '2-way'. In case of '1-way', support keystore won't be required however truststore is mandatory.

Issue Links

• is part of: RANGER-1288 Add SSL enabled MySQL support in Ranger Admin
• links to: Review request link