[HADOOP-13923] Allow changing password on JavaKeyStoreProvider generated keystores

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 2.6.0
• Component/s: kms
• Target Version/s: 2.8.0
• Assignee: Xiao Chen
• Reporter: Xiao Chen
• Created: 20/Dec/16 05:13
• Updated: 18/Feb/17 01:08
• Resolved: 18/Feb/17 01:07

Description

JavaKeyStoreProvider generates a jceks keystore file for key storage. Although we have different fall backs in ProviderUtils#locatePassword to specify the keystore password, it appears the password itself can never be changed after generation.

This jira is to make it possible to change the keystore password.

Issue Links

• relates to: HADOOP-14095 Document caveats about the default JavaKeyStoreProvider in KMS