508573958d
These options were used to configure the built-in JRE SSL libraries when downloading files from HTTPS servers. But because they were also used to set up the now (long) removed internal HTTPS file server, their default configuration chose convenience over security by having overly lenient settings. This change removes the configuration options that affect the JRE SSL libraries. The JRE trust store can still be configured via system properties (or globally in the JRE security config). The only lost functionality is not being able to disable the default hostname verifier when using spark-submit, which should be fine since Spark itself is not using https for any internal functionality anymore. I also removed the HTTP-related code from the REPL class loader, since we haven't had a HTTP server for REPL-generated classes for a while. Author: Marcelo Vanzin <vanzin@cloudera.com> Closes #20723 from vanzin/SPARK-23538. |
||
|---|---|---|
| .. | ||
| scala-2.11/src/main/scala/org/apache/spark/repl | ||
| scala-2.12/src/main/scala/org/apache/spark/repl | ||
| src | ||
| pom.xml | ||