iwasakims commented on pull request #3019: URL: https://github.com/apache/hadoop/pull/3019#issuecomment-842313287
On CentOS 8, OpensslAesCtrCryptoCodec is available while OpensslSm4CtrCryptoCodec is not. ``` $ bin/hadoop checknative 2021-05-17 13:02:39,196 DEBUG util.NativeCodeLoader: Trying to load the custom-built native-hadoop library... 2021-05-17 13:02:39,197 DEBUG util.NativeCodeLoader: Loaded the native-hadoop library 2021-05-17 13:02:39,324 INFO bzip2.Bzip2Factory: Successfully loaded & initialized native-bzip2 library system-native 2021-05-17 13:02:39,327 INFO zlib.ZlibFactory: Successfully loaded & initialized native-zlib library 2021-05-17 13:02:39,393 INFO nativeio.NativeIO: The native code was built without PMDK support. Native library checking: hadoop: true /home/centos/srcs/hadoop/hadoop-dist/target/hadoop-3.4.0-SNAPSHOT/lib/native/libhadoop.so.1.0.0 zlib: true /lib64/libz.so.1 zstd : true /lib64/libzstd.so.1 bzip2: true /lib64/libbz2.so.1 openssl: true /lib64/libcrypto.so ISA-L: true /lib64/libisal.so.2 PMDK: false The native code was built without PMDK support. $ bin/hadoop key create key-sm4 -cipher 'SM4/CTR/NoPadding' $ bin/hdfs dfs -mkdir /zone1 $ bin/hdfs crypto -createZone -path /zone1 -keyName key-sm4 $ bin/hdfs dfs -put README.txt /zone1/ 2021-05-17 13:05:25,570 DEBUG util.PerformanceAdvisory: Crypto codec org.apache.hadoop.crypto.OpensslSm4CtrCryptoCodec is not available. 2021-05-17 13:05:25,570 DEBUG util.PerformanceAdvisory: Using crypto codec org.apache.hadoop.crypto.JceSm4CtrCryptoCodec. $ bin/hadoop key create key-aes $ bin/hdfs dfs -mkdir /zone2 $ bin/hdfs crypto -createZone -path /zone2 -keyName key-aes $ bin/hdfs dfs -put NOTICE.txt /zone2/ 2021-05-17 13:09:04,773 DEBUG crypto.OpensslAesCtrCryptoCodec: Using org.apache.hadoop.crypto.random.OpensslSecureRandom as random number generator. 2021-05-17 13:09:04,775 DEBUG util.PerformanceAdvisory: Using crypto codec org.apache.hadoop.crypto.OpensslAesCtrCryptoCodec. ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
