[
https://issues.apache.org/jira/browse/HADOOP-15234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16386394#comment-16386394
]
Rushabh S Shah commented on HADOOP-15234:
-----------------------------------------
{quote} should we throw in the implementation of
KeyProviderFactory#createProvider such as JavaKeyStoreProvider#createprovider
and KMSCientProvider#createProvider
{quote}
How do you know what key provider it is trying to create ?
Are you trying to say that we compare the passed scheme with all the schemes
and try to find the best fit ?
IMO it is too much spoon feeding to administrators. We just have 3-4 schemes
and it shouldn't be too difficult to figure out the right scheme.
bq. with more specific exception message for invalid scheme like we do for the
authority and port check in KMSClientProvider#createProvdier?
In these checks, we know the scheme was {{kms://}} and there is something wrong
with authority and port.
> NPE when initializing KMSWebApp
> -------------------------------
>
> Key: HADOOP-15234
> URL: https://issues.apache.org/jira/browse/HADOOP-15234
> Project: Hadoop Common
> Issue Type: Bug
> Components: kms
> Reporter: Xiao Chen
> Assignee: fang zhenyi
> Priority: Major
> Attachments: HADOOP-15234.001.patch, HADOOP-15234.002.patch
>
>
> During KMS startup, if the {{keyProvider}} is null, it will NPE inside
> KeyProviderExtension.
> {noformat}
> java.lang.NullPointerException
> at
> org.apache.hadoop.crypto.key.KeyProviderExtension.<init>(KeyProviderExtension.java:43)
> at
> org.apache.hadoop.crypto.key.CachingKeyProvider.<init>(CachingKeyProvider.java:93)
> at
> org.apache.hadoop.crypto.key.kms.server.KMSWebApp.contextInitialized(KMSWebApp.java:170)
> {noformat}
> We're investigating the exact scenario that could lead to this, but the NPE
> and log around it can be improved.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
