Re: Adding SSL peer cert info to AvroSource

On Sun, Feb 9, 2014 at 11:06 AM, Pritchard, Charles X. -ND < charles.x.pritchard@disney.com> wrote: > > > From: Mike Percy [mpe...@apache.org] > Sent: Friday, February 07, 2014 8:12 PM > To: user@flume.apache.org > Subject:

RE: Adding SSL peer cert info to AvroSource

From: Mike Percy [mpe...@apache.org] Sent: Friday, February 07, 2014 8:12 PM To: user@flume.apache.org Subject: Re: Adding SSL peer cert info to AvroSource On Fri, Feb 7, 2014 at 6:50 PM, Pritchard, Charles X. -ND mailto:charles.x.pritchard

Re: Adding SSL peer cert info to AvroSource

On Fri, Feb 7, 2014 at 6:50 PM, Pritchard, Charles X. -ND < charles.x.pritchard@disney.com> wrote: > I’d like to be able to use the client CN in subsequent > configuration/routing parameters. > The bulk of the Flume config (e.g. selectors, sinks) works with event > headers. > Does it need to

Re: Adding SSL peer cert info to AvroSource

I’d like to be able to use the client CN in subsequent configuration/routing parameters. The bulk of the Flume config (e.g. selectors, sinks) works with event headers. A bit confused as to what you’re asking/what your context is when you bring up event persistence. At the point the event is sub

Re: Adding SSL peer cert info to AvroSource

On Fri, Feb 7, 2014 at 5:15 PM, Pritchard, Charles X. -ND < charles.x.pritchard@disney.com> wrote: > > I’m finding it a challenge to see where in the AvroSource class I could > actually push the data into Event headers. > All of those methods are stateless when it comes to the connection — they

Re: Adding SSL peer cert info to AvroSource

On Feb 7, 2014, at 4:25 PM, Mike Percy mailto:mpe...@apache.org>> wrote: I’ve posted sample code to the bug report I filed: https://issues.apache.org/jira/browse/FLUME-2204 OK, cool. Is AvroSource instantiated for every connection? https://github.com/apache/flume/blob/flume-1.4/flume-ng-core/

Re: Adding SSL peer cert info to AvroSource

gt; I'd like to route messages to a directory based on the string or >> otherwise send them to a fallback directory on a failed cert. >> >> >> >> >> From: Mike Percy [mpe...@apache.org] >> Sent: Wednesday, January

Re: Adding SSL peer cert info to AvroSource

che.org<mailto:mpe...@apache.org>] Sent: Wednesday, January 29, 2014 6:44 PM To: user@flume.apache.org<mailto:user@flume.apache.org> Subject: Re: Adding SSL peer cert info to AvroSource If it's using a signed cert then what do you need to put into the filter? You mean a list of

Re: Adding SSL peer cert info to AvroSource

to a fallback directory on a failed cert. > > > > > From: Mike Percy [mpe...@apache.org] > Sent: Wednesday, January 29, 2014 6:44 PM > To: user@flume.apache.org > Subject: Re: Adding SSL peer cert info to AvroSource > > If it's using a signed cert then what do you

RE: Adding SSL peer cert info to AvroSource

ailed cert. From: Mike Percy [mpe...@apache.org] Sent: Wednesday, January 29, 2014 6:44 PM To: user@flume.apache.org Subject: Re: Adding SSL peer cert info to AvroSource If it's using a signed cert then what do you need to put into the filter? You mean a list of allow

Re: Adding SSL peer cert info to AvroSource

If it's using a signed cert then what do you need to put into the filter? You mean a list of allowed peers? If so then you could either try to piggyback on the IpFilter and make it accept hostnames, or yes add another filter config option such as hostFilter. Mike On Wed, Jan 29, 2014 at 12:23 PM

Adding SSL peer cert info to AvroSource

I’m trying to add in the feature to expose the client’s peer cert into AvroSource: https://apache.googlesource.com/flume/+/trunk/flume-ng-core/src/main/java/org/apache/flume/source/AvroSource.java Per the bug request I filed in October: https://issues.apache.org/jira/browse/FLUME-2204 Any ideas