Bigtop
  1. Bigtop
  2. BIGTOP-881

Add support for Oozie to be configured with SSL (HTTPS)

    Details

    • Type: New Feature New Feature
    • Status: Closed
    • Priority: Critical Critical
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 0.6.0
    • Component/s: None
    • Labels:
      None

      Description

      We added support for easier configuration of SSL for Oozie in OOZIE-1233 and later modified/fixed in OOZIE-1268.

      The changes include some new environment variables, a new server.xml, and a new web.xml. The environment variables are such that they don't require any special handling because they are there even when SSL isn't being used. So to enable SSL with the default configuration, the only changes that have to be done are:

      1. Replace oozie-server/conf/ssl/server.xml with oozie-server/conf/ssl/ssl-server.xml
      2. Replace oozie-server/webapps/oozie/WEB-INF/web.xml with oozie-server/conf/ssl/ssl-web.xml

      Note that this is only available in Oozie 3.3.2 or later, which should be released soon.

        Issue Links

          Activity

          Hide
          Sean Mackrory added a comment -

          Many thanks to Robert for some much-needed help troubleshooting this when testing!

          Show
          Sean Mackrory added a comment - Many thanks to Robert for some much-needed help troubleshooting this when testing!
          Hide
          Sean Mackrory added a comment -

          To explain a little bit, there's an exploded-war deployment for non-SSL, and another for SSL-enabled. The user can enable SSL by changing CATALINA_BASE to "/usr/lib/oozie/oozie-server-ssl" instead of "/usr/lib/oozie/oozie-server".

          Show
          Sean Mackrory added a comment - To explain a little bit, there's an exploded-war deployment for non-SSL, and another for SSL-enabled. The user can enable SSL by changing CATALINA_BASE to "/usr/lib/oozie/oozie-server-ssl" instead of "/usr/lib/oozie/oozie-server".
          Hide
          Roman Shaposhnik added a comment -

          +1 and commited!

          Show
          Roman Shaposhnik added a comment - +1 and commited!

            People

            • Assignee:
              Sean Mackrory
              Reporter:
              Robert Kanter
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development