You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-dev@hadoop.apache.org by "howie yu (JIRA)" <ji...@apache.org> on 2014/04/22 04:46:17 UTC

[jira] [Created] (HADOOP-10529) A TokenKeyProvider for a Centralized Key Manager Server (BEE: bee-key-manager)

howie yu created HADOOP-10529:
---------------------------------

             Summary: A TokenKeyProvider for a Centralized Key Manager Server (BEE: bee-key-manager)
                 Key: HADOOP-10529
                 URL: https://issues.apache.org/jira/browse/HADOOP-10529
             Project: Hadoop Common
          Issue Type: Sub-task
          Components: security
            Reporter: howie yu


This is a key provider based on HADOOP-9331. HADOOP-9331 has designed a complete Hadoop crypto codec framework, but the key can only be retrieved from a local Java KeyStore file. To the convenience, we design a Centralized Key Manager Server (BEE: bee-key-manager) and user can use this TokenKeyProvider to retrieve keys from the Centralized Key Manager Server. By the way, to secure the key exchange, we leverage HTTPS + SPNego/SASL to protect the key exchange. To the detail design and usage, please refer to https://github.com/trendmicro/BEE. 

Moreover, there are still much more requests about Hadoop Data Encryption (such as provide standalone module, support KMIP...etc.), if anyone has interested in those features, pleas let us know. 
 




--
This message was sent by Atlassian JIRA
(v6.2#6252)