I’m trying to add in the feature to expose the client’s peer cert into 
AvroSource:
https://apache.googlesource.com/flume/+/trunk/flume-ng-core/src/main/java/org/apache/flume/source/AvroSource.java

Per the bug request I filed in October:
https://issues.apache.org/jira/browse/FLUME-2204

Any ideas on how I might expose the data — it’s just a string for the CN from 
the peer cert.
I’m having a difficult time figuring out how to expose this connection state 
information so that Flume’s configuration magic can take hold from there.

It seems a little like I need to create yet-another-filter, kind of like 
IpFilter.


Any pointers?


The CN info may be used to route to a particular directory (in an HDFS sink) 
and/or set a header for the AvroEvent, or possibly just validate a
header (header.CN == ssl peer CN   or FAIL).

-Charles

Reply via email to