| commit | aba667bc4fdf7760ecb8969d52b0a23b883cd4a0 | [log] [tgz] |
|---|---|---|
| author | Ian Maxon <ian@maxons.email> | Tue Feb 25 23:51:44 2025 -0800 |
| committer | Hussain Towaileb <hussainht@gmail.com> | Thu Feb 27 21:02:47 2025 +0000 |
| tree | 4d80b4873a5747211879f139199713e55ea7e3ad | |
| parent | af29cbe759a8e9a8b865cad70fac01737f6ceb5b [diff] |
[NO ISSUE][NET] Only use client certificates if configured Change-Id: Id46266849ded6d0ea632293e829aed78396e1ea2 Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/19471 Integration-Tests: Jenkins <jenkins@fulliautomatix.ics.uci.edu> Reviewed-by: Michael Blow <mblow@apache.org> Tested-by: Michael Blow <mblow@apache.org>
diff --git a/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java b/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java index d8f5cff..7a0e482 100644 --- a/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java +++ b/hyracks-fullstack/hyracks/hyracks-ipc/src/main/java/org/apache/hyracks/ipc/security/NetworkSecurityManager.java
@@ -53,7 +53,8 @@ @Override public SSLEngine newSSLEngine(boolean clientMode) { try { - SSLEngine sslEngine = newSSLContext(clientMode).createSSLEngine(); + boolean useClientCerts = clientMode && config.useMutualAuth(); + SSLEngine sslEngine = newSSLContext(useClientCerts).createSSLEngine(); sslEngine.setUseClientMode(clientMode); return sslEngine; } catch (Exception ex) {