You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "Hunter Logan (Jira)" <ji...@apache.org> on 2020/11/19 16:30:00 UTC
[jira] [Assigned] (HIVE-18728) Secure webHCat with SSL
[ https://issues.apache.org/jira/browse/HIVE-18728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Hunter Logan reassigned HIVE-18728:
-----------------------------------
Assignee: Hunter Logan (was: Oleksiy Sayankin)
> Secure webHCat with SSL
> -----------------------
>
> Key: HIVE-18728
> URL: https://issues.apache.org/jira/browse/HIVE-18728
> Project: Hive
> Issue Type: New Feature
> Components: Security
> Reporter: Oleksiy Sayankin
> Assignee: Hunter Logan
> Priority: Major
> Fix For: 3.2.0
>
> Attachments: HIVE-18728.1.patch, HIVE-18728.2.patch, HIVE-18728.3.patch
>
>
> Doc for the issue:
> *Configure WebHCat server to use SSL encryption*
> You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) encryption. The following WebHCat properties are added to enable SSL.
> {{templeton.use.ssl}}
> Default value: {{false}}
> Description: Set this to true for using SSL encryption for WebHCat server
> {{templeton.keystore.path}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore location for WebHCat server
> {{templeton.keystore.password}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore password for WebHCat server
> {{templeton.ssl.protocol.blacklist}}
> Default value: {{SSLv2,SSLv3}}
> Description: SSL Versions to disable for WebHCat server
> {{templeton.host}}
> Default value: {{0.0.0.0}}
> Description: The host address the WebHCat server will listen on.
> *Modifying the {{webhcat-site.xml}} file*
> Configure the following properties in the {{webhcat-site.xml}} file to enable SSL encryption on each node where WebHCat is installed:
> {code}
> <!-- WebHCat SSL -->
> <property>
> <name>templeton.use.ssl</name>
> <value>true</value>
> </property>
> <property>
> <name>templeton.keystore.path</name>
> <value>/path/to/ssl_keystore</value>
> </property>
> <property>
> <name>templeton.keystore.password</name>
> <value>password</value>
> </property>
> {code}
> *Example:* To check status of WebHCat server configured for SSL encryption use following command
> {code}
> curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status'
> {code}
> replace {{<user>}} and {{<password>}} with valid user/password. Replace {{<host>}} with your host name.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)