Return-Path: <hdfs-issues-return-178008-archive-asf-public=cust-asf.ponee.io@hadoop.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id 447B8200C1C
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Wed, 11 Jan 2017 01:25:00 +0100 (CET)
Received: by cust-asf.ponee.io (Postfix)
	id 43080160B3D; Wed, 11 Jan 2017 00:25:00 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id 89F4A160B4B
	for <archive-asf-public@cust-asf.ponee.io>; Wed, 11 Jan 2017 01:24:59 +0100 (CET)
Received: (qmail 46679 invoked by uid 500); 11 Jan 2017 00:24:58 -0000
Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:hdfs-issues-help@hadoop.apache.org>
List-Unsubscribe: <mailto:hdfs-issues-unsubscribe@hadoop.apache.org>
List-Post: <mailto:hdfs-issues@hadoop.apache.org>
List-Id: <hdfs-issues.hadoop.apache.org>
Delivered-To: mailing list hdfs-issues@hadoop.apache.org
Received: (qmail 46652 invoked by uid 99); 11 Jan 2017 00:24:58 -0000
Received: from arcas.apache.org (HELO arcas) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 Jan 2017 00:24:58 +0000
Received: from arcas.apache.org (localhost [127.0.0.1])
	by arcas (Postfix) with ESMTP id 55A8B2C03DE
	for <hdfs-issues@hadoop.apache.org>; Wed, 11 Jan 2017 00:24:58 +0000 (UTC)
Date: Wed, 11 Jan 2017 00:24:58 +0000 (UTC)
From: "Xiaoyu Yao (JIRA)" <jira@apache.org>
To: hdfs-issues@hadoop.apache.org
Message-ID: <JIRA.13032720.1483743957000.703117.1484094298347@Atlassian.JIRA>
In-Reply-To: <JIRA.13032720.1483743957000@Atlassian.JIRA>
References: <JIRA.13032720.1483743957000@Atlassian.JIRA> <JIRA.13032720.1483743957076@arcas>
Subject: [jira] [Commented] (HDFS-11302) Improve Logging for
 SSLHostnameVerifier
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
archived-at: Wed, 11 Jan 2017 00:25:00 -0000


    [ https://issues.apache.org/jira/browse/HDFS-11302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15816640#comment-15816640 ] 

Xiaoyu Yao commented on HDFS-11302:
-----------------------------------

Thanks [~vagarychen] for working on this. Patch looks good to me. +1 pending Jenkins.


> Improve Logging for SSLHostnameVerifier
> ---------------------------------------
>
>                 Key: HDFS-11302
>                 URL: https://issues.apache.org/jira/browse/HDFS-11302
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: security
>            Reporter: Xiaoyu Yao
>            Assignee: Chen Liang
>         Attachments: HDFS-11302.001.patch
>
>
> SSLHostnameVerifier interface/class was copied from other projects without any logging to help troubleshooting SSL certificate related issues. For a misconfigured SSL truststore, we may get some very confusing error message like
> {code}
> >hdfs dfs -cat swebhdfs://NNl/tmp/test1.txt
> ...
> cause:java.io.IOException: DN2:50475: HTTPS hostname wrong:  should be <DN2>
> cat: DN2:50475: HTTPS hostname wrong:  should be <DN2>
> {code}
> This ticket is opened to add tracing to give more useful context information around SSL certificate verification failures inside the following code.
> {code}AbstractVerifier#check(String[] host, X509Certificate cert) {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org