You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have some self-signed HTTPS servers and are using it in an insecure mode, but we cannot proxy it for two reasons:
health check ClusterStatsJdbcMonitor.java does not support insecure properties(use JDBC cause we got 404 for REST check)
However, this could be easily added and we can quickly implement it and let the backend work
proxy request ProxyRequestHandler.java also missing insecure properties
Unfortunately, we cannot add an insecure handler because it appears that Airlift requires a certificate configuration
In our enviromnet, there are many insecure usage, Is there any way to simply skip SSL verification, or is there a plan to add this configuration?
The text was updated successfully, but these errors were encountered:
Not actually.
Execute ~/trino-cli-418-executable.jar --server https://proxy-address:443 --catalog hive --user admin --password --insecure with select * from system.runtime.nodes , and it will returen an error of ProxyResponseHandler because ProxyRequestHandler post this sql to a https server via /v1/statement/ but use the default JettyClient which not support the insecure (or just not recongnize ?).
Currently, I am just foce enable JettyClient support insecure as follow work around:
We have some self-signed HTTPS servers and are using it in an insecure mode, but we cannot proxy it for two reasons:
ClusterStatsJdbcMonitor.java
does not supportinsecure
properties(use JDBC cause we got 404 for REST check)However, this could be easily added and we can quickly implement it and let the backend work
ProxyRequestHandler.java
also missinginsecure
propertiesUnfortunately, we cannot add an insecure handler because it appears that Airlift requires a certificate configuration
In our enviromnet, there are many
insecure
usage, Is there any way to simply skip SSL verification, or is there a plan to add this configuration?The text was updated successfully, but these errors were encountered: