[
https://issues.apache.org/jira/browse/HADOOP-10937?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14085681#comment-14085681
]
Andrew Wang commented on HADOOP-10937:
--------------------------------------
I guess this stems from how KeyProvider/KPCE provide no facility for storing or
retrieving EEKs, so the client is going to be serializing/deserializing EEKs
themselves. This means EEKs for decryption are (most of the time) not coming
from the KPCE, but being reconstructed from parts by the client. Additionally
enforcing that this string is "EEK" doesn't seem that valuable since we rely on
the client to do the right thing already, but I won't argue too much.
+1 I'll commit this shortly.
> Fix NullPointerException when touchz-ing a file
> -----------------------------------------------
>
> Key: HADOOP-10937
> URL: https://issues.apache.org/jira/browse/HADOOP-10937
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Arun Suresh
> Assignee: Arun Suresh
> Attachments: HADOOP-10937.1.patch, HADOOP-10937.2.patch
>
>
> Touchz-ing a file results in a Null Pointer Exception
> {noformat}
> [hdfs@mynode hadoop-common]$ hdfs dfs -touchz /enc3/touchFIle
> 2014-08-01 08:45:10,148 INFO [main] hdfs.DFSClient
> (DFSClient.java:<init>(605)) - Found KeyProvider: KeyProviderCryptoExtension:
> KMSClientProvider[http://mynode.myhost.com:16000/kms/v1/]
> -touchz: Fatal internal error
> java.lang.NullPointerException
> at
> org.apache.hadoop.crypto.key.kms.KMSClientProvider.decryptEncryptedKey(KMSClientProvider.java:652)
> at
> org.apache.hadoop.crypto.key.KeyProviderCryptoExtension.decryptEncryptedKey(KeyProviderCryptoExtension.java:342)
> at
> org.apache.hadoop.hdfs.DFSClient.decryptEncryptedDataEncryptionKey(DFSClient.java:1319)
> at
> org.apache.hadoop.hdfs.DFSClient.createWrappedOutputStream(DFSClient.java:1364)
> at
> org.apache.hadoop.hdfs.DFSClient.createWrappedOutputStream(DFSClient.java:1352)
> at
> org.apache.hadoop.hdfs.DistributedFileSystem$6.doCall(DistributedFileSystem.java:391)
> at
> org.apache.hadoop.hdfs.DistributedFileSystem$6.doCall(DistributedFileSystem.java:384)
> at
> org.apache.hadoop.fs.FileSystemLinkResolver.resolve(FileSystemLinkResolver.java:81)
> at
> org.apache.hadoop.hdfs.DistributedFileSystem.create(DistributedFileSystem.java:384)
> at
> org.apache.hadoop.hdfs.DistributedFileSystem.create(DistributedFileSystem.java:328)
> at org.apache.hadoop.fs.FileSystem.create(FileSystem.java:906)
> at org.apache.hadoop.fs.FileSystem.create(FileSystem.java:887)
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.2#6252)
