[jira] [Updated] (HIVE-18728) Secure webHCat with SSL

["Oleksiy Sayankin (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HIVE-18728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Oleksiy Sayankin updated HIVE-18728:
------------------------------------
    Status: In Progress  (was: Patch Available)

> Secure webHCat with SSL
> -----------------------
>
>                 Key: HIVE-18728
>                 URL: https://issues.apache.org/jira/browse/HIVE-18728
>             Project: Hive
>          Issue Type: New Feature
>          Components: Security
>            Reporter: Oleksiy Sayankin
>            Assignee: Oleksiy Sayankin
>            Priority: Major
>             Fix For: 3.0.0
>
>         Attachments: HIVE-18728.1.patch, HIVE-18728.2.patch
>
>
> Doc for the issue:
> *Configure WebHCat server to use SSL encryption*
> You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) encryption. The following WebHCat properties are added to enable SSL. 
> {{templeton.use.ssl}}
> Default value: {{false}}
> Description: Set this to true for using SSL encryption for  WebHCat server
> {{templeton.keystore.path}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore location for WebHCat server
> {{templeton.keystore.password}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore password for WebHCat server
> {{templeton.ssl.protocol.blacklist}}
> Default value: {{SSLv2,SSLv3}}
> Description: SSL Versions to disable for WebHCat server
> {{templeton.host}}
> Default value: {{0.0.0.0}}
> Description: The host address the WebHCat server will listen on.
> *Modifying the {{webhcat-site.xml}} file*
> Configure the following properties in the {{webhcat-site.xml}} file to enable SSL encryption on each node where WebHCat is installed: 
> {code}
> <!-- WebHCat SSL -->
> <property>
>   <name>templeton.use.ssl</name>
>   <value>true</value>
> </property>
> <property>
>   <name>templeton.keystore.path</name>
>   <value>/path/to/ssl_keystore</value>
> </property>
> <property>
>   <name>templeton.keystore.password</name>
>   <value>password</value>
> </property>
> {code}
> *Example:* To check status of WebHCat server configured for SSL encryption use following command
> {code}
> curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status'
> {code}
> replace {{<user>}} and {{<password>}} with valid user/password.  Replace {{<host>}} with your host name.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)