Mate Szalay-Beko
4b8fe9d7c7
HBASE-25993 Make excluded SSL cipher suites configurable for all Web UIs ( #3375 )
...
When starting a jetty http server, one can explicitly exclude certain (unsecure)
SSL cipher suites. This can be especially important, when the HBase cluster
needs to be compliant with security regulations (e.g. FIPS).
Currently it is possible to set the excluded ciphers for the ThriftServer
("hbase.thrift.ssl.exclude.cipher.suites") or for the RestServer
("hbase.rest.ssl.exclude.cipher.suites"), but one can not configure it for the
regular InfoServer started by e.g. the master or region servers.
In this commit I want to introduce a new configuration
"ssl.server.exclude.cipher.list" to configure the excluded cipher suites for the
http server started by the InfoServer. This parameter has the same name and will
work in the same way, as it was already implemented in hadoop (e.g. for hdfs/yarn).
See: HADOOP-12668, HADOOP-14341
Co-authored-by: Mate Szalay-Beko <symat@apache.com>
Signed-off-by: Peter Somogyi <psomogyi@apache.org>
2021-06-10 16:59:29 +02:00
Andrew Purtell
09eebe5cd0
Preparing development version 2.4.5-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-06-07 15:21:44 -07:00
Andrew Purtell
20e7ba45b0
Preparing hbase release 2.4.4RC0; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-06-07 15:21:39 -07:00
Andrew Purtell
e82340ec64
Preparing development version 2.4.4-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-19 12:38:15 -07:00
Andrew Purtell
401b60b217
Preparing hbase release 2.4.3RC1; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-19 12:38:07 -07:00
Andrew Purtell
4eaba9e9b1
Revert "Preparing hbase release 2.4.3RC1; tagging and updates to CHANGES.md and RELEASENOTES.md"
...
This reverts commit c2707bc6a8
.
2021-05-19 12:28:57 -07:00
Andrew Purtell
49ed8cc306
Revert "Preparing development version 2.4.4-SNAPSHOT"
...
This reverts commit cf287aaf95
.
2021-05-19 12:28:48 -07:00
Andrew Purtell
cf287aaf95
Preparing development version 2.4.4-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-19 11:13:54 -07:00
Andrew Purtell
c2707bc6a8
Preparing hbase release 2.4.3RC1; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-19 11:13:48 -07:00
Andrew Purtell
97c8201f9a
Revert "Preparing hbase release 2.4.3RC1; tagging and updates to CHANGES.md and RELEASENOTES.md"
...
This reverts commit f9ed394627
.
2021-05-19 10:52:24 -07:00
Andrew Purtell
ed71600540
Revert "Preparing development version 2.4.4-SNAPSHOT"
...
This reverts commit 231c37b4f6
.
2021-05-19 10:52:15 -07:00
Andrew Purtell
231c37b4f6
Preparing development version 2.4.4-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-19 10:18:46 -07:00
Andrew Purtell
f9ed394627
Preparing hbase release 2.4.3RC1; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-19 10:18:40 -07:00
Andrew Purtell
8ce0aba77e
Revert "Preparing hbase release 2.4.3RC0; tagging and updates to CHANGES.md and RELEASENOTES.md"
...
This reverts commit af14fd998c
.
2021-05-19 10:08:39 -07:00
Andrew Purtell
d82426c41c
Revert "Preparing development version 2.4.4-SNAPSHOT"
...
This reverts commit 0c5c0e5da8
.
2021-05-19 10:07:40 -07:00
Andrew Purtell
0c5c0e5da8
Preparing development version 2.4.4-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-05-14 13:12:49 -07:00
Andrew Purtell
13043ecf96
Revert "Preparing development version 2.4.4-SNAPSHOT"
...
This reverts commit 8fd02a75f8
.
2021-05-14 13:12:49 -07:00
Andrew Purtell
8fd02a75f8
Preparing development version 2.4.4-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-04-27 14:58:08 -07:00
Andrew Purtell
af14fd998c
Preparing hbase release 2.4.3RC0; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-04-27 14:58:03 -07:00
Nick Dimiduk
7179c013bb
HBASE-25770 Http InfoServers should honor gzip encoding when requested ( #3159 )
...
Signed-off-by: Duo Zhang <zhangduo@apache.org>
Signed-off-by: Josh Elser <elserj@apache.org>
2021-04-15 13:53:01 -07:00
Michael Stack
79914c8233
HBASE-25685 asyncprofiler2.0 no longer supports svg; wants html ( #3078 )
2021-03-22 21:30:37 -07:00
Duo Zhang
a4dad396b0
HBASE-25688 Use CustomRequestLog instead of Slf4jRequestLog for jetty ( #3075 )
...
Signed-off-by: stack <stack@apache.org>
2021-03-23 11:19:45 +08:00
Andrew Purtell
bda2b8af8b
Preparing development version 2.4.3-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-03-08 15:59:42 -08:00
Andrew Purtell
3e98c51c51
Preparing hbase release 2.4.2RC0; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-03-08 15:59:36 -08:00
Andrew Purtell
bab2d41390
Preparing development version 2.4.2-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-15 10:51:49 -08:00
Andrew Purtell
4c3e174297
Revert "Preparing development version 2.4.2-SNAPSHOT"
...
This reverts commit e0aa015542
.
2021-01-15 10:19:09 -08:00
Andrew Purtell
e0aa015542
Preparing development version 2.4.2-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-14 12:55:38 -08:00
Andrew Purtell
67a87017b4
Revert "Preparing development version 2.4.2-SNAPSHOT"
...
This reverts commit 00fec5a2f7
.
2021-01-14 12:54:05 -08:00
Andrew Purtell
00fec5a2f7
Preparing development version 2.4.2-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-14 11:43:50 -08:00
Andrew Purtell
3f495149e9
Revert "Preparing development version 2.4.2-SNAPSHOT"
...
This reverts commit 9f17bd2f1b
.
2021-01-14 11:00:42 -08:00
Andrew Purtell
9f17bd2f1b
Preparing development version 2.4.2-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-13 18:03:20 -08:00
Andrew Purtell
422a8cc32d
Revert "Preparing development version 2.4.2-SNAPSHOT"
...
This reverts commit 29619049b2
.
2021-01-13 17:44:09 -08:00
Andrew Purtell
29619049b2
Preparing development version 2.4.2-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-13 11:39:43 -08:00
Andrew Purtell
85075940c0
Revert "Preparing development version 2.4.2-SNAPSHOT"
...
This reverts commit 51c55fcc2f
.
2021-01-13 10:24:09 -08:00
Andrew Purtell
51c55fcc2f
Preparing development version 2.4.2-SNAPSHOT
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-12 17:06:38 -08:00
Andrew Purtell
35044cc40c
Preparing hbase release 2.4.1RC0; tagging and updates to CHANGES.md and RELEASENOTES.md
...
Signed-off-by: Andrew Purtell <apurtell@apache.org>
2021-01-12 17:06:33 -08:00
Duo Zhang
90db5e4f99
HBASE-25452 Use MatcherAssert.assertThat instead of org.junit.Assert.assertThat ( #2826 )
...
Signed-off-by: Guanghao Zhang <zghao@apache.org>
2020-12-30 11:06:58 +08:00
Andrew Purtell
3ff115ebe4
Preparing development version 2.4.1-SNAPSHOT
2020-12-03 09:52:11 -08:00
Andrew Purtell
f7bc7be1eb
Revert "Preparing development version 2.4.1-SNAPSHOT"
...
This reverts commit 4127a3940a
.
2020-12-03 09:37:38 -08:00
Andrew Purtell
4127a3940a
Preparing development version 2.4.1-SNAPSHOT
2020-12-02 14:04:53 -08:00
Andrew Purtell
108c2ecb52
Preparing hbase release 2.4.0RC0; tagging and updates to CHANGES.md and RELEASENOTES.md
2020-12-02 14:04:49 -08:00
Andrew Purtell
1b6399a480
HBASE-24640 [branch-2] Purge use of VisibleForTesting ( #2696 )
...
Signed-off-by: Nick Dimiduk <ndimiduk@apache.org>
2020-11-25 14:15:32 -08:00
Richard Antal
5ce3e3e12c
HBASE-24268 REST and Thrift server do not handle the "doAs" parameter case insensitively
...
Closes #1843
Signed-off-by: Josh Elser <elserj@apache.org>
Signed-off-by: Sean Busbey <busbey@apache.org>
2020-11-24 12:25:46 -05:00
Mate Szalay-Beko
873bef1d7e
HBASE-25267 Add SSL keystore type and truststore related configs for HBase RESTServer ( #2642 )
...
HBASE-25267 Make SSL keystore type configurable in HBase RESTServer
In this patch I want to introduce the hbase.rest.ssl.keystore.type parameter,
enabling us to customize the keystore type for the REST server. If the
parameter is not provided, then we should fall-back to the current behaviour
(which assumes keystore type JKS).
This is similar to how we already configure the InfoServer objects with the
ssl.server.keystore.type parameter to set up HTTPS for the various admin UIs.
Signed-off-by: Wellington Chevreuil <wellington.chevreuil@gmail.com>
Signed-off-by: Balazs Meszaros <meszibalu@apache.org>
Signed-off-by: Sean Busbey <busbey@apache.org>
2020-11-12 12:43:58 +01:00
申胜利
1de1ec176f
HBASE-24054 To be safe, jetty's version number should be blocked.
2020-10-05 17:37:21 -07:00
ramkrish86
3cb4b29fa3
HBASE-25002 Create simple pattern matching query for retrieving metri… ( #2370 ) ( #2398 )
...
* HBASE-25002 Create simple pattern matching query for retrieving metrics matching the pattern
* Address review comments
* Final set of comments addressed
* Address checkstyle comments
2020-09-14 19:44:00 +05:30
Esteban Gutierrez
800a4d9868
HBASE-19352 Port HADOOP-10379: Protect authentication cookies with the HttpOnly and Secure flags
...
Signed-off-by: Sean Busbey <busbey@apache.org>
2020-09-03 16:18:33 -05:00
Duo Zhang
4455856e9c
HBASE-23834 HBase fails to run on Hadoop 3.3.0/3.2.2/3.1.4 due to jetty version mismatch ( #2222 )
...
Signed-off-by: Viraj Jasani <vjasani@apache.org>
Signed-off-by: Josh Elser <elserj@apache.org>
Signed-off-by: Peter Somogyi <psomogyi@apache.org>
2020-08-25 15:02:55 +08:00
YeChao Chen
8f31b12ba4
HBASE-24777 InfoServer support ipv6 host and port
...
Closes #2147
Signed-off-by: Duo Zhang <zhangduo@apache.org>
Signed-off-by: Viraj Jasani <vjasani@apache.org>
2020-07-27 20:46:49 +05:30
David Manning
25e929bdf0
HBASE-24657 add unit test for JSONBean.java
...
Closes #2004
Signed-off-by: Viraj Jasani <vjasani@apache.org>
2020-07-02 18:51:13 +05:30