[HADOOP-13443] KMS should check the type of underlying keyprovider of KeyProviderExtension before falling back to default

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.9.0, 3.0.0-alpha1
• Component/s: kms
• Target Version/s: 2.9.0
• Hadoop Flags: Reviewed
• Assignee: Anthony Young-Garner
• Reporter: Anthony Young-Garner
• Created: 29/Jul/16 21:28
• Updated: 30/Aug/16 01:12
• Resolved: 04/Aug/16 08:10

Description

By default, the KMS wraps the active key provider in a CachingKeyProvider at runtime. This prevents the KeyProviderCryptoExtension.createKeyProviderCryptoExtension method from ever detecting whether the active key provider implements theKeyProviderCryptoExtension interface. Therefore, the DefaultCryptoExtension is always used.