[HADOOP-10429] KeyStores should have methods to generate the materials themselves, KeyShell should use them

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.6.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 25/Mar/14 05:40
• Updated: 12/May/16 18:26
• Resolved: 09/Apr/14 19:46

Description

Currently, the KeyProvider API expects the caller to provide the key materials. And, the KeyShell generates key materials.

For security reasons, KeyProvider implementations may want to generate and hide (from the user generating the key) the key materials.

Issue Links

• blocks: HADOOP-10430 KeyProvider Metadata should have an optional description, there should be a method to retrieve the metadata from all keys
• blocks: HADOOP-10433 Key Management Server based on KeyProvider API