Does CDH support backend database using SSL/TLS?

[#1]

I can't find any instruction on this. Is there anyway to enable SSL/TLS between CM services such as CM, HIVE, Navigator, etc. and backend DB such as mysql, postgres and oralce?

[#2 · Accepted solution]

Hello,

Thank you for reaching out to us on this, unfortunately at this time we do not provide any easily configurable mechanisms to make TLS on the backing databases simplistic to deploy. Generally speaking the JDBC drivers that allow these applications to talk to the database are capable of handling TLS but they must be configured by hand or through safety valves depending on the specific service. If you are a licensed customer please contact your Account Team for assistance.

[#3]

Thanks. For cloud deployment, we definately want SSL/TLS for backend DBs.

[#4]

Has this situation improved over the past year?  Is there any public information on how to secure the back-end database connections?