[
https://issues.apache.org/jira/browse/HDFS-12909?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16348954#comment-16348954
]
Kihwal Lee commented on HDFS-12909:
-----------------------------------
The patch looks good in general. One concern is that it changes the default
behavior. We can argue that the existing default behavior is incorrect, but
some clients may break after this change. If we end up agreeing that the
benefit of this outweighs any potential issues, we can go ahead, but this will
be flagged as an incompatible change.
> SSLConnectionConfigurator creation error should be printed only if security
> is enabled
> --------------------------------------------------------------------------------------
>
> Key: HDFS-12909
> URL: https://issues.apache.org/jira/browse/HDFS-12909
> Project: Hadoop HDFS
> Issue Type: Bug
> Reporter: Namit Maheshwari
> Assignee: Lokesh Jain
> Priority: Major
> Attachments: HDFS-12909.002.patch, HDFS-12909.003.patch,
> HDFS-12909.004.patch, HDFS-12909.patch
>
>
> Currently URLConnectionFactory#getSSLConnectionConfiguration attempts to
> create a SSL connection configurator even if security is not enabled. This
> raises the below false warning in the logs.
> {code:java}
> 17/12/08 10:12:03 WARN web.URLConnectionFactory: Cannot load customized ssl
> related configuration. Fallback to system-generic settings.
> java.io.FileNotFoundException: /etc/security/clientKeys/all.jks (No such file
> or directory)
> at java.io.FileInputStream.open0(Native Method)
> at java.io.FileInputStream.open(FileInputStream.java:195)
> at java.io.FileInputStream.<init>(FileInputStream.java:138)
> at
> org.apache.hadoop.security.ssl.ReloadingX509TrustManager.loadTrustManager(ReloadingX509TrustManager.java:169)
> at
> org.apache.hadoop.security.ssl.ReloadingX509TrustManager.<init>(ReloadingX509TrustManager.java:87)
> at
> org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory.init(FileBasedKeyStoresFactory.java:219)
> at org.apache.hadoop.security.ssl.SSLFactory.init(SSLFactory.java:176)
> at
> org.apache.hadoop.hdfs.web.URLConnectionFactory.newSslConnConfigurator(URLConnectionFactory.java:164)
> at
> org.apache.hadoop.hdfs.web.URLConnectionFactory.getSSLConnectionConfiguration(URLConnectionFactory.java:106)
> at
> org.apache.hadoop.hdfs.web.URLConnectionFactory.newDefaultURLConnectionFactory(URLConnectionFactory.java:85)
> at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:136)
> at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:128)
> at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:396)
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
