ranger icon indicating copy to clipboard operation
ranger copied to clipboard

RANGER-4776: SolrAuditDestination uses local SSLContext instead of se…

Open turcsanyip opened this issue 1 year ago • 0 comments

…tting the system-wide default

What changes were proposed in this pull request?

In order to avoid setting the system-wide SSLContext in SolrAuditDestination (which may affect other components running in the same JVM negatively), use Solr's HttpClientUtil.setSocketFactoryRegistryProvider() to pass the SSLContext to the Solr client locally.

How was this patch tested?

We use the Ranger Plugin in Apache NiFi. Before the change, Azure components in NiFi failed with "unable to find valid certification path to requested target" error. After the change, the Ranger - Solr connection still works and the Azure components can also access the needed certificate in the system default truststore (cacerts).

turcsanyip avatar Apr 17 '24 07:04 turcsanyip