[
https://issues.apache.org/jira/browse/HDFS-7067?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14277619#comment-14277619
]
Charles Lamb commented on HDFS-7067:
------------------------------------
[~cmccabe],
bq. Charles, is the TestKeyProviderFactory failure due to this patch?
Correct. test-patch.sh doesn't apply the hdfs7067.keystore file to
hadoop-common/hadoop-common/src/test/resources and so the new test (which
depends on it) will fail. The test passes when I apply the patch and the
.keystore file in a fresh clone.
> ClassCastException while using a key created by keytool to create encryption
> zone.
> -----------------------------------------------------------------------------------
>
> Key: HDFS-7067
> URL: https://issues.apache.org/jira/browse/HDFS-7067
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: encryption
> Affects Versions: 2.6.0
> Reporter: Yi Yao
> Assignee: Charles Lamb
> Priority: Minor
> Attachments: HDFS-7067.001.patch, HDFS-7067.002.patch,
> hdfs7067.keystore
>
>
> I'm using transparent encryption. If I create a key for KMS keystore via
> keytool and use the key to create an encryption zone. I get a
> ClassCastException rather than an exception with decent error message. I know
> we should use 'hadoop key create' to create a key. It's better to provide an
> decent error message to remind user to use the right way to create a KMS key.
> [LOG]
> ERROR[user=hdfs] Method:'GET' Exception:'java.lang.ClassCastException:
> javax.crypto.spec.SecretKeySpec cannot be cast to
> org.apache.hadoop.crypto.key.JavaKeyStoreProvider$KeyMetadata'
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
