Skip to content
This repository has been archived by the owner on Jan 9, 2020. It is now read-only.

Cherry pick of SPARK-21642 #484

Closed
wants to merge 1 commit into from

Conversation

ash211
Copy link

@ash211 ash211 commented Sep 7, 2017

To verify driver-headless-service branch succeeds with this from Apache master.

(cherry picked from commit d695a52)

…dress

## What changes were proposed in this pull request?

The patch lets spark web ui use FQDN as its hostname instead of ip address.

In current implementation, ip address of a driver host is set to DRIVER_HOST_ADDRESS. This becomes a problem when we enable SSL using "spark.ssl.enabled", "spark.ssl.trustStore" and "spark.ssl.keyStore" properties. When we configure these properties, spark web ui is launched with SSL enabled and the HTTPS server is configured with the custom SSL certificate you configured in these properties.
In this case, client gets javax.net.ssl.SSLPeerUnverifiedException exception when the client accesses the spark web ui because the client fails to verify the SSL certificate (Common Name of the SSL cert does not match with DRIVER_HOST_ADDRESS).

To avoid the exception, we should use FQDN of the driver host for DRIVER_HOST_ADDRESS.

Error message that client gets when the client accesses spark web ui:
javax.net.ssl.SSLPeerUnverifiedException: Certificate for <10.102.138.239> doesn't match any of the subject alternative names: []

## How was this patch tested?
manual tests

Author: Hideaki Tanaka <[email protected]>

Closes apache#18846 from thideeeee/SPARK-21642.

(cherry picked from commit d695a52)
@foxish
Copy link
Member

foxish commented Sep 7, 2017

This was just for running integration tests correct?

@ash211
Copy link
Author

ash211 commented Sep 7, 2017

Correct

@ash211 ash211 closed this Sep 7, 2017
@ash211 ash211 deleted the verify-spark-21642 branch September 7, 2017 18:12
ifilonenko pushed a commit to ifilonenko/spark that referenced this pull request Feb 26, 2019
…8s#484)

###### _excavator_ is a bot for automating changes across repositories.

Changes produced by the roomba/latest-baseline-oss check.

{runtimeCheckDesc}
To enable or disable this check, please contact the maintainers of Excavator.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants