Spark 2.8.3 Question Before Upgrade

jemcinto · March 28, 2019, 3:38pm

When testing the new version of Spark -

Is there any reason why I have to manually input the Connection settings for our host and port?
The only other way I can get logged in is by checking the box Accept all certificates and checking Disable certificate hostname verification.

We are running Openfire 4.0.2 in production as well as Spark 2.6.3.

wroot · March 28, 2019, 5:33pm

This is a long explanation Login issues since Spark 2.8.0

Essentially, because your Openfire-network setup is wrong. Old Spark versions allowed that to slide, but new versions are more strict about security.

You should use proper domain name to login, proper SSL certificates for that domain name. If this is an internal server and it is not possible to get a proper SSL certificate for it, then you would still have to check “Accept all certificates” option as it would be a silf-signed certificate and it is considered less safe.