Package org.apache.hadoop.hbase.security

Class TestMutualTlsClientSideNonLocalhost

java.lang.Object

org.apache.hadoop.hbase.security.TestMutualTlsClientSideNonLocalhost

public class TestMutualTlsClientSideNonLocalhost
extends Object

Tests for client-side mTLS focusing on client hostname verification in the case when client and server are on different hosts. We try to simulate this behaviour by querying the hostname with

InetAddress.getLocalHost()

Certificates are generated with the hostname in Subject Alternative Names, server binds non-localhost interface and client connects via remote IP address. Parameter is set to verify both TLS/plaintext and TLS-only cases.

Field Summary

Fields

Modifier and Type	Field	Description
static final HBaseClassTestRule	CLASS_RULE
protected static File	DIR
protected static X509TestContextProvider	PROVIDER
protected org.apache.hadoop.hbase.ipc.RpcClient	rpcClient
protected org.apache.hadoop.hbase.ipc.RpcServer	rpcServer
private org.apache.hadoop.hbase.shaded.ipc.protobuf.generated.TestRpcServiceProtos.TestProtobufRpcProto.BlockingInterface	stub
boolean	supportPlaintext
protected static HBaseCommonTestingUtil	UTIL
private X509TestContext	x509TestContext

Constructor Summary

Constructors

Constructor	Description
TestMutualTlsClientSideNonLocalhost()

Method Summary

Modifier and Type	Method	Description
static void	cleanUp()
static List<Boolean>	data()
private void	initialize(org.apache.hadoop.conf.Configuration serverConf, org.apache.hadoop.conf.Configuration clientConf)
void	setUp()
static void	setUpBeforeClass()
void	tearDown()
void	testClientAuth()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CLASS_RULE

public static final HBaseClassTestRule CLASS_RULE

UTIL

protected static HBaseCommonTestingUtil UTIL

DIR

protected static File DIR

PROVIDER

protected static X509TestContextProvider PROVIDER

x509TestContext

private X509TestContext x509TestContext

rpcServer

protected org.apache.hadoop.hbase.ipc.RpcServer rpcServer

rpcClient

protected org.apache.hadoop.hbase.ipc.RpcClient rpcClient

stub

private org.apache.hadoop.hbase.shaded.ipc.protobuf.generated.TestRpcServiceProtos.TestProtobufRpcProto.BlockingInterface stub

supportPlaintext

public boolean supportPlaintext

Constructor Details

TestMutualTlsClientSideNonLocalhost

public TestMutualTlsClientSideNonLocalhost()

Method Details

data

public static List<Boolean> data()

setUpBeforeClass

public static void setUpBeforeClass()
                             throws IOException

Throws:

IOException

cleanUp

public static void cleanUp()

setUp

public void setUp()
           throws Exception

Throws:

Exception

initialize

private void initialize(org.apache.hadoop.conf.Configuration serverConf,
 org.apache.hadoop.conf.Configuration clientConf)
                 throws GeneralSecurityException,
IOException,
org.bouncycastle.operator.OperatorCreationException

Throws:

GeneralSecurityException

IOException

org.bouncycastle.operator.OperatorCreationException

tearDown

public void tearDown()
              throws IOException

Throws:

IOException

testClientAuth

public void testClientAuth()
                    throws Exception

Throws:

Exception