flume-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Peter Turcsanyi (JIRA)" <j...@apache.org>
Subject [jira] [Created] (FLUME-3269) Support JSSE keystore/trustore -D system properties
Date Wed, 15 Aug 2018 12:44:00 GMT
Peter Turcsanyi created FLUME-3269:
--------------------------------------

             Summary: Support JSSE keystore/trustore -D system properties
                 Key: FLUME-3269
                 URL: https://issues.apache.org/jira/browse/FLUME-3269
             Project: Flume
          Issue Type: Improvement
            Reporter: Peter Turcsanyi


Several Flume components support SSL, but they all have their own config parameters for specifying
the location and password for keystore and truststore.

These parameters could be passed as standard JSSE system properties (specified in flume-env.sh):
{code}
-Djavax.net.ssl.keyStore=/path/to/keystore.jks
-Djavax.net.ssl.keyStorePassword=keystore-password
-Djavax.net.ssl.trustStore=/path/to/truststore.jks
-Djavax.net.ssl.trustStorePassword=truststore-password
{code}
This would be a more consistent and standard based configuration.

The logic of applying the config parameters:
- if the agent config defines the keystore / password for a component, then they will be used
(allowing customisation and backward compatibility)
- if the agent config does not define the keystore / password for a component, but the -D
properties are present, then they will be used 
- otherwise config error



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@flume.apache.org
For additional commands, e-mail: issues-help@flume.apache.org


Mime
View raw message