July 2023
Intermediate to advanced
278 pages
5h 40m
Chinese
Content preview from Trino 权威指南：原书第2版
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
212
|
第
10
章
别忘了在更新属性文件后重启工作节点。现在你已经对内部和外部的通信做出了完全的
保护，并可以防止网络上的窃听者从
Trino
截获数据。
一旦一切都已正常工作，记得在
config.properties
中设置
http-server.
http.enabled=false
来禁用
HTTP
；否则用户仍可以使用
HTTP
连接到集群。
10.4 CA
与自签名证书
当你第一次尝试
Trino
并努力将其配置得更安全时，最容易的方式是使用自签名证书。
然而在实践中，你的组织可能不允许使用它，因为在某些情况下它们不是很安全，并且
容易受到攻击。因此你可以使用由
CA
数字签名的证书。
一旦你创建了
keystore
，就需要创建一个证书签名请求（
CSR
）以发送给
CA
对
keystore
进行签名。
CA
会验证你是不是你，并向你发出由它们签名的证书。然后，该证书被导
入你的
keystore
中，并将提供给客户端来替代之前的自签名证书。
一个有趣的地方与
Java truststore
的使用有关。
Java
提供了一个默认的
truststore
，其中
可能已经包含了
CA
。在这种情况下，提交给客户端的证书可以通过默认的
truststore
来
验证，而在这个默认
truststore
不包含
CA
时就可能很麻烦。或者你的组织可能有自己的
内部
CA
，用于向员工和服务发布组织证书。所以即使你使用了
CA
，仍建议你创建自己
的
truststore
以供
Trino
使用。
不过，此时你可以导入
CA
证书链，而不是导入
Trino
使用的实际证书。证书链是由两
个或多个
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.