bryanck opened a new pull request, #13190:
URL: https://github.com/apache/iceberg/pull/13190

   This PR adds an option to the REST client to configure TLS settings via a 
pluggable configurer class. Java supports setting some TLS parameters via 
System properties, but doing so will affect all connections, and causes issues 
with clients such as the S3 client.
   
   Also, while some basic parameters could be set via catalog properties, using 
a plugin approach allows the most flexibility when configuring mutual 
authentication, which can involve custom logic for certificate and host name 
verification. This aligns with the pluggable model currently used for 
AuthManagers.
   
   If useful, we could follow this PR up with an implementation that is driven 
off of catalog properties, for cases that don't need special logic. This would 
allow setting the keystore and the truststore sepcifically for the REST client, 
for example.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org

Reply via email to