[HADOOP-10847] Remove the usage of sun.security.x509.* in testing code

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.7.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: pascal oliva
• Reporter: Kai Zheng
• Created: 16/Jul/14 02:21
• Updated: 06/Aug/15 18:29
• Resolved: 04/Nov/14 18:52

Description

As was told by Max (Oracle), JDK9 is likely to block all accesses to sun.* classes.

Below is from email of Andrew Purtell:

The use of sun.* APIs to create a certificate in Hadoop and HBase test code can be removed. Someone (Intel? Oracle?) can submit a JIRA that replaces the programmatic construction with a stringified binary cert for use in the relevant unit tests.

In Hadoop, the calls in question are below:

hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:24:import sun.security.x509.CertificateIssuerName;
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:25:import sun.security.x509.CertificateSerialNumber;
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:26:import sun.security.x509.CertificateSubjectName;
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:27:import sun.security.x509.CertificateValidity;
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:28:import sun.security.x509.CertificateVersion;
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:29:import sun.security.x509.CertificateX509Key;
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:30:import sun.security.x509.X500Name; 
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:31:import sun.security.x509.X509CertImpl; 
hadoop-common/src/test/java/org/apache/hadoop/security/ssl/KeyStoreTestUtil.java:32:import sun.security.x509.X509CertInfo;

Issue Links

• is related to: HADOOP-12300 BUILDING.txt instructions for skipping tests incomplete/obsolete, build can fail.
• is related to: HADOOP-11230 Add missing dependency of bouncycastle for kms, httpfs, hdfs, MR and YARN
• is related to: KNOX-422 Build break with JVM IBM JAVA
• relates to: HADOOP-11090 [Umbrella] Support Java 8 in Hadoop
• relates to: HADOOP-10848 Cleanup calling of sun.security.krb5.Config