Haohui Mai created HDFS-5502:
--------------------------------
Summary: Fix HTTPS support for HsftpFileSystem
Key: HDFS-5502
URL: https://issues.apache.org/jira/browse/HDFS-5502
Project: Hadoop HDFS
Issue Type: Sub-task
Reporter: Haohui Mai
Assignee: Haohui Mai
The current implementation of HsftpFileSystem suffers from the following issues:
* It initializes the SSLContext incorrectly. It blindly trusts all server
certificates which creates a security hole.
* It tries to cancel delegation token through http, not https, which leads to
HDFS-5295.
* It overrides the default socket factory for HttpsConnection. Given the fact
that it trusts all server-side certificate, it accidentally disables all checks
on server certificates for all https connections.
This jira tracks the effort to fix the above issues.
--
This message was sent by Atlassian JIRA
(v6.1#6144)
