tikv / importer

tikv-importer is a front-end to help ingesting large number of KV pairs into a TiKV cluster

Apache License 2.0

20 stars 14 forks source link

kv_service: do check TLS cert CN #83

Closed kennytm closed 3 years ago

kennytm commented 3 years ago

Signed-off-by: kennytm kennytm@gmail.com

What have you changed? (mandatory)

Check the TLS cert CN in all gRPC service APIs.

What are the type of the changes? (mandatory)

New feature (change which adds functionality)

How has this PR been tested? (mandatory)

N/A

Does this PR affect TiDB Lightning? (mandatory)

gRPC connections from Lightning with wrong CN will be rejected. This does not require any code change on Lightning.

Refer to a related PR or issue link (optional)

Benchmark result if necessary (optional)

Add a few positive/negative examples (optional)

Release notes

tikv-importer now supports the security.cert-allowed-cn option, to specify a list of TLS common names (CN) allowed to connect.