Mailing-List: contact user-help@flink.apache.org; run by ezmlm
Precedence: bulk
Date: Mon, 26 Jun 2017 12:03:38 -0700 (PDT)
From: "ani.desh1512" <ani.desh1512@gmail.com>
To: user@flink.apache.org
Message-ID: <1498503818862-14005.post@n4.nabble.com>
In-Reply-To: <1041DA72-D34F-4125-B16B-895513FDAF16@gmail.com>
References: <1498428555533-13988.post@n4.nabble.com> <371f9384-9411-7be1-3937-e425ce58235b@apache.org> <1498488944564-14001.post@n4.nabble.com> <1041DA72-D34F-4125-B16B-895513FDAF16@gmail.com>
Subject: Re: MapR libraries shading issue
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
archived-at: Mon, 26 Jun 2017 19:21:09 -0000

Pasting my reply from the MapR community thread:

So, I have found a temporary workaround for this. Heres what I did:
For the client, I found out the password of /opt/mapr/conf/ssl_trustore via
ssl-client.xml
For both Datadog and Amazon S3, I found out the certs chain that they were
using (i could do this easily in firefox). I then dowloaded these certs and
added them to the mapr trustore i.e. /opt/mapr/conf/ssl_trustore e.g:
keytool -import -alias s3 -file s3.cer -keystore
/opt/mapr/conf/ssl_truststore -storepass <map_client_trustore_pass>)
After doing this, the ssl handshake error that i was getting was resolved.
 
I say this is a temporary fix because, lets say in future Amazon S3 change
their root certificate issuer or they change their ssl certificate, then we
ll need to do these steps again. Also, it is cumbersome to add these certs
for EACH AND EVERY website that we are trying to access.
 
So, I think the issue is that once we add mapr libs to flink classpath,
MapR's keystore/truststore get used and that is what is causing the problem.
Is this the expected behaviour? Would this be a bug on Flink side or mapr
side or (worse) even on the base apache http client used by aws and datadog?


--
View this message in context: http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/MapR-libraries-shading-issue-tp13988p14005.html
Sent from the Apache Flink User Mailing List archive. mailing list archive at Nabble.com.