You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2015/01/15 03:21:36 UTC
[jira] [Commented] (HADOOP-11481) ClassCastException while using a
key created by keytool to create encryption zone.
[ https://issues.apache.org/jira/browse/HADOOP-11481?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14278124#comment-14278124 ]
Hudson commented on HADOOP-11481:
---------------------------------
FAILURE: Integrated in Hadoop-trunk-Commit #6863 (See [https://builds.apache.org/job/Hadoop-trunk-Commit/6863/])
Add CHANGES.txt for HADOOP-11481 (cmccabe: rev 5805dc0f0405bee418daa1c9890a669da591cf41)
* hadoop-common-project/hadoop-common/CHANGES.txt
> ClassCastException while using a key created by keytool to create encryption zone.
> -----------------------------------------------------------------------------------
>
> Key: HADOOP-11481
> URL: https://issues.apache.org/jira/browse/HADOOP-11481
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 2.6.0
> Reporter: Yi Yao
> Assignee: Charles Lamb
> Priority: Minor
> Fix For: 2.7.0
>
> Attachments: HDFS-7067.001.patch, HDFS-7067.002.patch, hdfs7067.keystore
>
>
> I'm using transparent encryption. If I create a key for KMS keystore via keytool and use the key to create an encryption zone. I get a ClassCastException rather than an exception with decent error message. I know we should use 'hadoop key create' to create a key. It's better to provide an decent error message to remind user to use the right way to create a KMS key.
> [LOG]
> ERROR[user=hdfs] Method:'GET' Exception:'java.lang.ClassCastException: javax.crypto.spec.SecretKeySpec cannot be cast to org.apache.hadoop.crypto.key.JavaKeyStoreProvider$KeyMetadata'
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)