You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-issues@hadoop.apache.org by "Andrew Wang (JIRA)" <ji...@apache.org> on 2014/10/02 20:17:34 UTC

[jira] [Updated] (HDFS-7181) Remove incorrect precondition check on key length in FileEncryptionInfo

     [ https://issues.apache.org/jira/browse/HDFS-7181?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Wang updated HDFS-7181:
------------------------------
    Attachment: hdfs-7181.001.patch

Patch attached. It's hard to unit test this, since it requires having the unlimited strength JCE installed, which has export restrictions.

I tested this manually by creating a 256bit key, creating a new zone with this, and writing and reading some files. I tested with JKS, going to do a quick KMS test as well.

> Remove incorrect precondition check on key length in FileEncryptionInfo
> -----------------------------------------------------------------------
>
>                 Key: HDFS-7181
>                 URL: https://issues.apache.org/jira/browse/HDFS-7181
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: encryption
>    Affects Versions: 2.6.0
>            Reporter: Andrew Wang
>            Assignee: Andrew Wang
>            Priority: Critical
>         Attachments: hdfs-7181.001.patch
>
>
> We have a bad precondition check left over from a long ago CipherSuite refactor. This currently prevents using keys of a length other than 128bits.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)