[HDFS-12909] SSLConnectionConfigurator creation error should be printed only if security is enabled

• Type: Bug
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Assignee: Lokesh Jain
• Reporter: Namit Maheshwari
• Created: 08/Dec/17 10:58
• Updated: 02/Feb/18 19:09

Description

Currently URLConnectionFactory#getSSLConnectionConfiguration attempts to create a SSL connection configurator even if security is not enabled. This raises the below false warning in the logs.

17/12/08 10:12:03 WARN web.URLConnectionFactory: Cannot load customized ssl related configuration. Fallback to system-generic settings.
java.io.FileNotFoundException: /etc/security/clientKeys/all.jks (No such file or directory)
	at java.io.FileInputStream.open0(Native Method)
	at java.io.FileInputStream.open(FileInputStream.java:195)
	at java.io.FileInputStream.<init>(FileInputStream.java:138)
	at org.apache.hadoop.security.ssl.ReloadingX509TrustManager.loadTrustManager(ReloadingX509TrustManager.java:169)
	at org.apache.hadoop.security.ssl.ReloadingX509TrustManager.<init>(ReloadingX509TrustManager.java:87)
	at org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory.init(FileBasedKeyStoresFactory.java:219)
	at org.apache.hadoop.security.ssl.SSLFactory.init(SSLFactory.java:176)
	at org.apache.hadoop.hdfs.web.URLConnectionFactory.newSslConnConfigurator(URLConnectionFactory.java:164)
	at org.apache.hadoop.hdfs.web.URLConnectionFactory.getSSLConnectionConfiguration(URLConnectionFactory.java:106)
	at org.apache.hadoop.hdfs.web.URLConnectionFactory.newDefaultURLConnectionFactory(URLConnectionFactory.java:85)
	at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:136)
	at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:128)
	at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:396)