[BIGTOP-881] Add support for Oozie to be configured with SSL (HTTPS)

• Type: New Feature
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 0.6.0
• Assignee: Sean Mackrory
• Reporter: Robert Kanter
• Created: 25/Mar/13 17:02
• Updated: 21/Jun/13 23:49
• Resolved: 02/May/13 17:40

Description

We added support for easier configuration of SSL for Oozie in OOZIE-1233 and later modified/fixed in OOZIE-1268.

The changes include some new environment variables, a new server.xml, and a new web.xml. The environment variables are such that they don't require any special handling because they are there even when SSL isn't being used. So to enable SSL with the default configuration, the only changes that have to be done are:

1. Replace oozie-server/conf/ssl/server.xml with oozie-server/conf/ssl/ssl-server.xml
2. Replace oozie-server/webapps/oozie/WEB-INF/web.xml with oozie-server/conf/ssl/ssl-web.xml

Note that this is only available in Oozie 3.3.2 or later, which should be released soon.

Issue Links

• depends upon: OOZIE-1268 Configuring Oozie to use SSL doesn't work if addtowar.sh is invoked directly
• depends upon: OOZIE-1233 Add ability to configure Oozie to use HTTPS (SSL)