Closed
Description
In x-pack/qa/smoke-test-plugins-ssl and (once #37600 is merged) x-pack/qa/reindex-tests-with-security we need to call
GET /_cluster/health?wait_for_nodes=${numNodes}&wait_for_status=yellow
on a node that uses TLS on the HTTP port, with a custom CA.
Normally we use ant.get
to call the cluster health API, but that utility does not have any facilties for customising the trust manager for the URL.
The builds that need this currently implement their own handling with HttpsURLConnection
, but we should centralise this.
The utility should support reading a CA from a PEM file (the JRE's CertificateFactory
can do this) so that it is possible to run it on a FIPS enabled JVM.