1.10.1-RC3
alexeyserbin
tagged this
16 Nov 01:40
This patch fixes a typo in the connection negotiation code in the Java client. Prior to this fix, channel binding information was not verified during connection negotiation because the peer certificate was not set. In addition, I modified the error handing code in Negotiator.java to abort connection negotiation upon receiving SSLPeerUnverifiedException due to the absence of the channel binding information or the presence of the invalid one. I also added a test to verify that Kudu Java client doesn't connect to a Kudu server which doesn't provide valid channel binding information during the connection negotiation phase. Kudos to Andy Singer for pointing to the bug. Change-Id: I7bfd428128e224f03901a6cd7b33283495a28d54 Reviewed-on: http://gerrit.cloudera.org:8080/14713 Tested-by: Kudu Jenkins Reviewed-by: Adar Dembo <[email protected]> Reviewed-by: Todd Lipcon <[email protected]> (cherry picked from commit a0e896475c139d308e3b6e32110e97168b9562c6) Reviewed-on: http://gerrit.cloudera.org:8080/14724 Reviewed-by: Alexey Serbin <[email protected]>