You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Tanvi Penumudy (Jira)" <ji...@apache.org> on 2024/05/03 10:59:00 UTC
[jira] [Updated] (HDDS-10802) Improve logging for signature verification
[ https://issues.apache.org/jira/browse/HDDS-10802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tanvi Penumudy updated HDDS-10802:
----------------------------------
Description:
When one encounters a 'Tampered/Invalid token' exception, it may occur due to
OzoneDelegationTokenSecretManager#verifySignature failing in any one of the following scenarios:
# Failure when obtaining the signer's certificate (CertificateClient#getCertificate call).
# In case the signer's certificate returned from this code is simply null.
# In case of an expired certificate or a certificate not yet valid.
# Failure during CertificateClient#verifySignature (with the signer's certificate).
Related code snippet [link|https://github.com/apache/ozone/blob/master/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/security/OzoneDelegationTokenSecretManager.java#L437-L466].
While we are already logging an error for the latter two cases, this patch introduces additional logging for the former two cases.
was:
When one encounters a 'Tampered/Invalid token' exception, it may occur due to
OzoneDelegationTokenSecretManager#verifySignature failing in any one of the following scenarios: # Failure when obtaining the signer's certificate (CertificateClient#getCertificate call).
# In case the signer's certificate returned from this code is simply null.
# In case of an expired certificate or a certificate not yet valid.
# Failure during CertificateClient#verifySignature (with the signer's certificate).
Related code snippet [link|https://github.com/apache/ozone/blob/master/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/security/OzoneDelegationTokenSecretManager.java#L437-L466].
While we are already logging an error for the latter two cases, this patch introduces additional logging for the former two cases.
> Improve logging for signature verification
> ------------------------------------------
>
> Key: HDDS-10802
> URL: https://issues.apache.org/jira/browse/HDDS-10802
> Project: Apache Ozone
> Issue Type: Improvement
> Components: OM
> Reporter: Tanvi Penumudy
> Assignee: Tanvi Penumudy
> Priority: Major
>
> When one encounters a 'Tampered/Invalid token' exception, it may occur due to
> OzoneDelegationTokenSecretManager#verifySignature failing in any one of the following scenarios:
> # Failure when obtaining the signer's certificate (CertificateClient#getCertificate call).
> # In case the signer's certificate returned from this code is simply null.
> # In case of an expired certificate or a certificate not yet valid.
> # Failure during CertificateClient#verifySignature (with the signer's certificate).
> Related code snippet [link|https://github.com/apache/ozone/blob/master/hadoop-ozone/ozone-manager/src/main/java/org/apache/hadoop/ozone/security/OzoneDelegationTokenSecretManager.java#L437-L466].
> While we are already logging an error for the latter two cases, this patch introduces additional logging for the former two cases.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org