You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Philip Zeyliger (JIRA)" <ji...@apache.org> on 2018/05/17 22:33:00 UTC

[jira] [Resolved] (IMPALA-7035) Impala HDFS Encryption tests failing after OpenJDK update

     [ https://issues.apache.org/jira/browse/IMPALA-7035?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Philip Zeyliger resolved IMPALA-7035.
-------------------------------------
    Resolution: Fixed
      Assignee: Philip Zeyliger

> Impala HDFS Encryption tests failing after OpenJDK update
> ---------------------------------------------------------
>
>                 Key: IMPALA-7035
>                 URL: https://issues.apache.org/jira/browse/IMPALA-7035
>             Project: IMPALA
>          Issue Type: Task
>            Reporter: Philip Zeyliger
>            Assignee: Philip Zeyliger
>            Priority: Major
>
> I have seen {{impala-py.test tests/metadata/test_hdfs_encryption.py}} fail with the following error:
> {{E AssertionError: Error creating encryption zone: RemoteException: Can't recover key for testkey1 from keystore [file:/home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore|file:///home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore]}}
> I believe what's going on is described in https://issues.apache.org/jira/browse/HDFS-13494. In short, the JDK now has a special whitelist for an API as a result of a security vulnerability.
> A workaround in the KMS init script to configure $HADOOP_OPTS seems to do the trick.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)