Stephen Chu created HDFS-7032: --------------------------------- Summary: Add WebHDFS support for reading and writing to encryption zones Key: HDFS-7032 URL: https://issues.apache.org/jira/browse/HDFS-7032 Project: Hadoop HDFS Issue Type: Sub-task Components: encryption, webhdfs Affects Versions: 3.0.0, 2.6.0 Reporter: Stephen Chu
Currently, decrypting files within encryption zones does not work through WebHDFS. Users will get returned the raw data. For example: {code} bash-4.1$ hdfs crypto -listZones /enc2 key128 /jenkins key128 bash-4.1$ hdfs dfs -cat /enc2/hello hello and goodbye bash-4.1$ hadoop fs -cat webhdfs://hdfs-cdh5-vanilla-1.host.com:20101/enc2/hello14/09/08 15:55:26 WARN ssl.FileBasedKeyStoresFactory: The property 'ssl.client.truststore.location' has not been set, no TrustStore will be loaded 忡?~?A ?`?y???Wbash-4.1$ bash-4.1$ curl -i -L "http://hdfs-cdh5-vanilla-1.host.com:20101/webhdfs/v1/enc2/hello?user.name=hdfs&op=OPEN" HTTP/1.1 307 TEMPORARY_REDIRECT Cache-Control: no-cache Expires: Mon, 08 Sep 2014 22:56:08 GMT Date: Mon, 08 Sep 2014 22:56:08 GMT Pragma: no-cache Expires: Mon, 08 Sep 2014 22:56:08 GMT Date: Mon, 08 Sep 2014 22:56:08 GMT Pragma: no-cache Content-Type: application/octet-stream Set-Cookie: hadoop.auth=u=hdfs&p=hdfs&t=simple&e=1410252968270&s=QzpylAy1ltts1F6hHpsVFGC0TfA=; Version=1; Path=/; Expires=Tue, 09-Sep-2014 08:56:08 GMT; HttpOnly Location: http://hdfs-cdh5-vanilla-1.host.com:20003/webhdfs/v1/enc2/hello?op=OPEN&user.name=hdfs&namenoderpcaddress=hdfs-cdh5-vanilla-1.host.com:8020&offset=0 Content-Length: 0 Server: Jetty(6.1.26) HTTP/1.1 200 OK Cache-Control: no-cache Expires: Mon, 08 Sep 2014 22:56:08 GMT Date: Mon, 08 Sep 2014 22:56:08 GMT Pragma: no-cache Expires: Mon, 08 Sep 2014 22:56:08 GMT Date: Mon, 08 Sep 2014 22:56:08 GMT Pragma: no-cache Content-Type: application/octet-stream Content-Length: 18 Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Server: Jetty(6.1.26) 忡?~?A ?`?y???Wbash-4.1$ {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)