[jira] [Updated] (HIVE-18728) Secure webHCat with SSL

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HIVE-18728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated HIVE-18728:
----------------------------------
    Labels: pull-request-available  (was: )

> Secure webHCat with SSL
> -----------------------
>
>                 Key: HIVE-18728
>                 URL: https://issues.apache.org/jira/browse/HIVE-18728
>             Project: Hive
>          Issue Type: New Feature
>          Components: Security
>            Reporter: Oleksiy Sayankin
>            Assignee: Hunter Logan
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.2.0
>
>         Attachments: HIVE-18728.1.patch, HIVE-18728.2.patch, HIVE-18728.3.patch
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Doc for the issue:
> *Configure WebHCat server to use SSL encryption*
> You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) encryption. The following WebHCat properties are added to enable SSL. 
> {{templeton.use.ssl}}
> Default value: {{false}}
> Description: Set this to true for using SSL encryption for  WebHCat server
> {{templeton.keystore.path}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore location for WebHCat server
> {{templeton.keystore.password}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore password for WebHCat server
> {{templeton.ssl.protocol.blacklist}}
> Default value: {{SSLv2,SSLv3}}
> Description: SSL Versions to disable for WebHCat server
> {{templeton.host}}
> Default value: {{0.0.0.0}}
> Description: The host address the WebHCat server will listen on.
> *Modifying the {{webhcat-site.xml}} file*
> Configure the following properties in the {{webhcat-site.xml}} file to enable SSL encryption on each node where WebHCat is installed: 
> {code}
> <!-- WebHCat SSL -->
> <property>
>   <name>templeton.use.ssl</name>
>   <value>true</value>
> </property>
> <property>
>   <name>templeton.keystore.path</name>
>   <value>/path/to/ssl_keystore</value>
> </property>
> <property>
>   <name>templeton.keystore.password</name>
>   <value>password</value>
> </property>
> {code}
> *Example:* To check status of WebHCat server configured for SSL encryption use following command
> {code}
> curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status'
> {code}
> replace {{<user>}} and {{<password>}} with valid user/password.  Replace {{<host>}} with your host name.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)