[ 
https://issues.apache.org/jira/browse/HDFS-12909?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16350817#comment-16350817
 ] 

Lokesh Jain commented on HDFS-12909:
------------------------------------

[~kihwal] the patch does not change the functionality much. Only difference is 
that the client would now try https only if hdfs-site.xml has defined 
dfs.http.policy to be HTTPS_ONLY or HTTP_AND_HTTPS.

> SSLConnectionConfigurator creation error should be printed only if security 
> is enabled
> --------------------------------------------------------------------------------------
>
>                 Key: HDFS-12909
>                 URL: https://issues.apache.org/jira/browse/HDFS-12909
>             Project: Hadoop HDFS
>          Issue Type: Bug
>            Reporter: Namit Maheshwari
>            Assignee: Lokesh Jain
>            Priority: Major
>         Attachments: HDFS-12909.002.patch, HDFS-12909.003.patch, 
> HDFS-12909.004.patch, HDFS-12909.patch
>
>
> Currently URLConnectionFactory#getSSLConnectionConfiguration attempts to 
> create a SSL connection configurator even if security is not enabled. This 
> raises the below false warning in the logs.
> {code:java}
> 17/12/08 10:12:03 WARN web.URLConnectionFactory: Cannot load customized ssl 
> related configuration. Fallback to system-generic settings.
> java.io.FileNotFoundException: /etc/security/clientKeys/all.jks (No such file 
> or directory)
>       at java.io.FileInputStream.open0(Native Method)
>       at java.io.FileInputStream.open(FileInputStream.java:195)
>       at java.io.FileInputStream.<init>(FileInputStream.java:138)
>       at 
> org.apache.hadoop.security.ssl.ReloadingX509TrustManager.loadTrustManager(ReloadingX509TrustManager.java:169)
>       at 
> org.apache.hadoop.security.ssl.ReloadingX509TrustManager.<init>(ReloadingX509TrustManager.java:87)
>       at 
> org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory.init(FileBasedKeyStoresFactory.java:219)
>       at org.apache.hadoop.security.ssl.SSLFactory.init(SSLFactory.java:176)
>       at 
> org.apache.hadoop.hdfs.web.URLConnectionFactory.newSslConnConfigurator(URLConnectionFactory.java:164)
>       at 
> org.apache.hadoop.hdfs.web.URLConnectionFactory.getSSLConnectionConfiguration(URLConnectionFactory.java:106)
>       at 
> org.apache.hadoop.hdfs.web.URLConnectionFactory.newDefaultURLConnectionFactory(URLConnectionFactory.java:85)
>       at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:136)
>       at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:128)
>       at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:396)
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to