Skip to content
This repository was archived by the owner on Mar 15, 2023. It is now read-only.

Commit f5c2d4e

Browse files
XD-DENGwyndhblb
authored andcommitted
[AIRFLOW-3295] Fix potential security issue in DaskExecutor (apache#4128)
When user decides to use TLS/SSL encryption for DaskExecutor communications, `Distributed.Security` object will be created. However, argument `require_encryption` is missed to be set to `True` (its default value is `False`). This may fail the TLS/SSL encryption setting-up.
1 parent 6fa9c1f commit f5c2d4e

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

airflow/executors/dask_executor.py

+1
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,7 @@ def start(self):
4949
tls_client_key=self.tls_key,
5050
tls_client_cert=self.tls_cert,
5151
tls_ca_file=self.tls_ca,
52+
require_encryption=True,
5253
)
5354
else:
5455
security = None

0 commit comments

Comments
 (0)