[HADOOP-13131] Add tests to verify that S3A supports SSE-S3 encryption

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.7.2
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: fs/s3
• Target Version/s: 2.8.0
• Hadoop Flags: Reviewed
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 11/May/16 11:06
• Updated: 30/Aug/16 01:15
• Resolved: 01/Jun/16 22:15

Description

Although S3A claims to support server-side S3 encryption (and does, if you set the option), we don't have any test to verify this. Of course, as the encryption is transparent, it's hard to test.

Here's what I propose

1. a test which sets encryption = AES256; expects things to work as normal.
2. a test which sets encyption = DES and expects any operation creating a file or directory to fail with a 400 "bad request" error

Issue Links

• is depended upon by: HADOOP-12667 s3a: Support createNonRecursive API