[ 
https://issues.apache.org/jira/browse/HADOOP-16524?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17234241#comment-17234241
 ] 

Borislav Iordanov commented on HADOOP-16524:
--------------------------------------------

Hi all,

First time contributor here. It appears this is still an open issue and I hope 
you don't mind me taking a stab at it. Could anyone take a look at the 
following PR - [https://github.com/apache/hadoop/pull/2470] - and let me know 
what you think? The implementation also covers reloading the keystore in 
DataNode and it introduces a new configuration parameter that governs the 
polling interval. I've tried to follow the existing ReloadingX509TrustManager 
closely, but to avoid code duplication and to reduce the number of extra 
threads spun, I've consolidated the polling in a standard java.util.Timer. 
Otherwise, I've tried to follow the contributor coding guidelines, hope I did a 
good job there. Please let me know if I've missed something with respect to the 
process etc.

Best, Boris

> Automatic keystore reloading for HttpServer2
> --------------------------------------------
>
>                 Key: HADOOP-16524
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16524
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Kihwal Lee
>            Assignee: Kihwal Lee
>            Priority: Major
>              Labels: pull-request-available
>         Attachments: HADOOP-16524.patch
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Jetty 9 simplified reloading of keystore.   This allows hadoop daemon's SSL 
> cert to be updated in place without having to restart the service.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to