| 112 | } |
| 113 | |
| 114 | bool IsInternalTlsConfigured() { |
| 115 | // Enable SSL between servers only if both the client validation certificate and the |
| 116 | // server certificate are specified. 'Client' here means clients that are used by Impala |
| 117 | // services to contact other Impala services (as distinct from user clients of Impala |
| 118 | // like the shell), and 'servers' are the processes that serve those clients. The server |
| 119 | // needs a certificate (FLAGS_ssl_server_certificate) to demonstrate it is who the |
| 120 | // client thinks it is; the client needs a certificate (FLAGS_ssl_client_ca_certificate) |
| 121 | // to validate that assertion from the server. |
| 122 | return !FLAGS_ssl_client_ca_certificate.empty() && |
| 123 | !FLAGS_ssl_server_certificate.empty() && !FLAGS_ssl_private_key.empty(); |
| 124 | } |
| 125 | |
| 126 | bool IsExternalTlsConfigured() { |
| 127 | // If the ssl_server_certificate is set, then external TLS is configured, i.e. external |