[HADOOP-10428] JavaKeyStoreProvider should accept keystore password via configuration falling back to ENV VAR

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.6.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Alejandro Abdelnur
• Reporter: Alejandro Abdelnur
• Created: 25/Mar/14 05:34
• Updated: 26/Jul/18 13:16
• Resolved: 10/Apr/14 05:09

Description

Currently the password for the JavaKeyStoreProvider must be set in an ENV VAR.

Allowing the password to be set via configuration enables applications to interactively ask for the password before initializing the JavaKeyStoreProvider.

Issue Links

• blocks: HADOOP-10430 KeyProvider Metadata should have an optional description, there should be a method to retrieve the metadata from all keys
• blocks: HADOOP-10433 Key Management Server based on KeyProvider API
• is related to: HADOOP-12597 In kms-site.xml configuration "hadoop.security.keystore.JavaKeyStoreProvider.password" should be updated with new name