hello team :wave: I’ve been exploring https for t...
# pinot-dev
d
hello team šŸ‘‹ I’ve been exploring https for the query console. Learned a lot about Grizzly server. I was unable able to get Grizzly to load certificates in its keystores with default jvm -Djavax.net.ssl.keyStore properties. I even ended up building a SSLEngineConfigurator with the flag that explicitly mentions loading configuration from System.properties(), but without luck. So I ended up customizing
ControllerConf
to provide explicit tls properties to feed a custom Ā SSLEngineConfigurator`. Long story short, got it working, expect a polished PR. But this introduces a new property namespace for the
ControllerConf
. Behold the properties :
Copy code
controller.query.console.tls.truststore.path=generated.truststore.jks
controller.query.console.tls.truststore.password=tG6p920GWB5AwXN4QLUoFRMriUCcNN
controller.query.console.tls.keystore.path=generated.keystore.jks
controller.query.console.tls.keystore.password=tG6p920GWB5AwXN4QLUoFRMriUCcNN
šŸ· 1