You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Brahma Reddy Battula (JIRA)" <ji...@apache.org> on 2019/01/24 12:08:00 UTC
[jira] [Comment Edited] (HDFS-14037) Fix SSLFactory truststore
reloader thread leak in URLConnectionFactory
[ https://issues.apache.org/jira/browse/HDFS-14037?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16751043#comment-16751043 ]
Brahma Reddy Battula edited comment on HDFS-14037 at 1/24/19 12:07 PM:
-----------------------------------------------------------------------
Sorry for landing late. it's nice catch.
Following classes also might need to handle?
* NamenodeHeartbeatService
* DFSck
* Util
SSLConnectionConfigurator#configure needs to called. As URLConnectionFactory#getSSLConnectionConfiguration will give object without configuring(some methods didn't call on connection).
was (Author: brahmareddy):
Sorry for landing late.
NamenodeHeartbeatService
> Fix SSLFactory truststore reloader thread leak in URLConnectionFactory
> ----------------------------------------------------------------------
>
> Key: HDFS-14037
> URL: https://issues.apache.org/jira/browse/HDFS-14037
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: hdfs-client, webhdfs
> Reporter: Takanobu Asanuma
> Assignee: Takanobu Asanuma
> Priority: Major
> Attachments: HDFS-14037.1.patch, HDFS-14037.2.patch
>
>
> This is reported by [~yoshiata]. It is a similar issue as HADOOP-11368 and YARN-5309 in URLConnectionFactory.
> {quote}SSLFactory in newSslConnConfigurator and subsequently creates the ReloadingX509TrustManager instance which in turn starts a trust store reloader thread.
> However, the SSLFactory is never destroyed and hence the trust store reloader threads are not killed.
> {quote}
> We observed many leaked threads when we used swebhdfs via NiFi cluster.
> {noformat}
> "Truststore reloader thread" Id=221 TIMED_WAITING on null
> at java.lang.Thread.sleep(Native Method)
> at org.apache.hadoop.security.ssl.ReloadingX509TrustManager.run(ReloadingX509TrustManager.java:189)
> at java.lang.Thread.run(Thread.java:748)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org