[HADOOP-12809] Move to tomcat 8.0.21 to support different passwords for key and keystore on HTTPFS/KMS using SSL

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Not A Problem
• Affects Version/s: 2.7.0
• Component/s: conf, kms, scripts
• Assignee: Wellington Chevreuil
• Reporter: Wellington Chevreuil
• Created: 01/Jun/15 20:28
• Updated: 01/Sep/17 15:43
• Resolved: 01/Sep/17 15:43

Description

Currently, SSL for HTTPFS requires that keystore/truststore and key passwords be the same. This is a limitation from Tomcat version 6, which didn't have support for different passwords. From Tomcat 7, this is now possible by defining "keyPass" property for "Connector" configuration on Tomcat's server.xml file.

Issue Links

• is superceded by: HDFS-10860 Switch HttpFS from Tomcat to Jetty
• is superceded by: HADOOP-13597 Switch KMS from Tomcat to Jetty
• relates to: HADOOP-9991 Fix up Hadoop POMs, roll up JARs to latest versions
• relates to: HADOOP-10076 Update tomcat/jasper dependency to version 7