orc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From jamesclampffer <...@git.apache.org>
Subject [GitHub] orc issue #275: ORC-371: [C++] Disable Libhdfspp build when Cyrus SASL is no...
Date Thu, 31 May 2018 21:09:03 GMT
Github user jamesclampffer commented on the issue:

    https://github.com/apache/orc/pull/275
  
    Rather than skipping the entire libhdfs++ build you could set the NO_SASL parameter if
openssl or cyrus is missing to build libhdfs++ without support for strong authentication.
    
    At one point someone added a partial implementation of SASL DIGEGT-MD5 directly in libhdfs++
and I think that may try to use SSL's RNG to generate nonces (and looks like NO_SASL might
not prevent that).  If that breaks the build with NO_SASL set we can get rid of that code
in libhdfs++.  Even if that implementation worked it'd prevent the library from being FIPS
140-2 compliant which is a deal breaker for my work.


---

Mime
View raw message