You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Philip Zeyliger (JIRA)" <ji...@apache.org> on 2018/05/15 21:36:00 UTC

[jira] [Created] (IMPALA-7035) Impala HDFS Encryption tests failing after OpenJDK update

Philip Zeyliger created IMPALA-7035:
---------------------------------------

             Summary: Impala HDFS Encryption tests failing after OpenJDK update
                 Key: IMPALA-7035
                 URL: https://issues.apache.org/jira/browse/IMPALA-7035
             Project: IMPALA
          Issue Type: Task
            Reporter: Philip Zeyliger


I have seen {{impala-py.test tests/metadata/test_hdfs_encryption.py}} fail with the following error:

{{E AssertionError: Error creating encryption zone: RemoteException: Can't recover key for testkey1 from keystore [file:/home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore|file:///home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore]}}

I believe what's going on is described in https://issues.apache.org/jira/browse/HDFS-13494. In short, the JDK now has a special whitelist for an API as a result of a security vulnerability.

A workaround in the KMS init script to configure $HADOOP_OPTS seems to do the trick.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)