Skip to content

Commit

Permalink
[AIRFLOW-3295] Fix potential security issue in DaskExecutor (apache#4128
Browse files Browse the repository at this point in the history
)

When user decides to use TLS/SSL encryption
for DaskExecutor communications,
`Distributed.Security` object will be created.

However, argument `require_encryption` is missed
to be set to `True` (its default value is `False`).

This may fail the TLS/SSL encryption setting-up.
  • Loading branch information
XD-DENG authored and Alice Berard committed Jan 3, 2019
1 parent 051ed22 commit 20e6664
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions airflow/executors/dask_executor.py
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,7 @@ def start(self):
tls_client_key=self.tls_key,
tls_client_cert=self.tls_cert,
tls_ca_file=self.tls_ca,
require_encryption=True,
)
else:
security = None
Expand Down

0 comments on commit 20e6664

Please sign in to comment.