Re: Optionally disable SSL verification for RESTCatalog

2024-11-23 Thread Vladimir Ozerov
Hi Jean-Baptiste, Thank you. I am currently prototyping this. I'd like to ask for advice on how to properly test that feature. Essentially, I need to set up a server, install a self-signed certificate there, and test the behavior. Does a test similar to TestRESTCatalog with a custom TLS-enabled Je

Re: Optionally disable SSL verification for RESTCatalog

2024-11-13 Thread Jean-Baptiste Onofré
Hi Vladimir, Personally, even testing "local" REST catalogs, I'm setting up SSL certificates with a local CA, etc. It's not very painful. That said, I got your point, and I think we can update https://github.com/apache/iceberg/blob/main/core/src/main/java/org/apache/iceberg/rest/HTTPClient.java t

Optionally disable SSL verification for RESTCatalog

2024-11-13 Thread Vladimir Ozerov
Hi, Currently, RESTCatalog can work either over HTTP or HTTPS. In the latter case, Iceberg always performs a fully-fledged check of server certificate. While it is expected in production environments, this is not necessarily ok for nob-prod on-premises REST catalog deployments (DEV, QA, etc). Con