airflow-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiaodong DENG (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AIRFLOW-3295) Potential Security Issue in DaskExecutor
Date Sat, 03 Nov 2018 06:41:00 GMT
Xiaodong DENG created AIRFLOW-3295:
--------------------------------------

             Summary: Potential Security Issue in DaskExecutor
                 Key: AIRFLOW-3295
                 URL: https://issues.apache.org/jira/browse/AIRFLOW-3295
             Project: Apache Airflow
          Issue Type: Bug
          Components: executor
    Affects Versions: 1.10.0
            Reporter: Xiaodong DENG
            Assignee: Xiaodong DENG


When user decide to use SSL encryption for DaskExecutor communications, `Distributed.Security`
object will be created.

However, one argument (`require_encryption`) is missed to be set to `True` (its default value
is `False`). This may fail the SSL encryption setting-up.

 

Current implementation: [https://github.com/apache/incubator-airflow/blob/120f4856cdea5134971c4c4a239ddbfdc80db77e/airflow/executors/dask_executor.py#L48]

Related Documentation: http://distributed.dask.org/en/latest/tls.html?highlight=require_encryption#parameters



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message