You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Kihwal Lee (JIRA)" <ji...@apache.org> on 2017/12/08 14:48:00 UTC
[jira] [Commented] (HDFS-12909) SSLConnectionConfigurator should be
created only if security is enabled
[ https://issues.apache.org/jira/browse/HDFS-12909?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16283672#comment-16283672 ]
Kihwal Lee commented on HDFS-12909:
-----------------------------------
It has more to do with the SSL setting than the security setting. Currently there is no clean way to propagate dfs level ssl setting to URLConnectionFactory.
> SSLConnectionConfigurator should be created only if security is enabled
> -----------------------------------------------------------------------
>
> Key: HDFS-12909
> URL: https://issues.apache.org/jira/browse/HDFS-12909
> Project: Hadoop HDFS
> Issue Type: Bug
> Reporter: Lokesh Jain
> Assignee: Lokesh Jain
>
> Currently URLConnectionFactory#getSSLConnectionConfiguration attempts to create a SSL connection configurator even if security is not enabled. This raises the below false warning in the logs.
> {code:java}
> 17/12/08 10:12:03 WARN web.URLConnectionFactory: Cannot load customized ssl related configuration. Fallback to system-generic settings.
> java.io.FileNotFoundException: /etc/security/clientKeys/all.jks (No such file or directory)
> at java.io.FileInputStream.open0(Native Method)
> at java.io.FileInputStream.open(FileInputStream.java:195)
> at java.io.FileInputStream.<init>(FileInputStream.java:138)
> at org.apache.hadoop.security.ssl.ReloadingX509TrustManager.loadTrustManager(ReloadingX509TrustManager.java:169)
> at org.apache.hadoop.security.ssl.ReloadingX509TrustManager.<init>(ReloadingX509TrustManager.java:87)
> at org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory.init(FileBasedKeyStoresFactory.java:219)
> at org.apache.hadoop.security.ssl.SSLFactory.init(SSLFactory.java:176)
> at org.apache.hadoop.hdfs.web.URLConnectionFactory.newSslConnConfigurator(URLConnectionFactory.java:164)
> at org.apache.hadoop.hdfs.web.URLConnectionFactory.getSSLConnectionConfiguration(URLConnectionFactory.java:106)
> at org.apache.hadoop.hdfs.web.URLConnectionFactory.newDefaultURLConnectionFactory(URLConnectionFactory.java:85)
> at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:136)
> at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:128)
> at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:396)
> {code}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org