[HADOOP-14352] Make some HttpServer2 SSL properties optional

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha2
• Fix Version/s: 3.0.0-alpha4
• Component/s: kms
• Target Version/s: 3.0.0-alpha4
• Hadoop Flags: Reviewed
• Assignee: John Zhuge
• Reporter: John Zhuge
• Created: 25/Apr/17 16:42
• Updated: 03/May/17 20:23
• Resolved: 03/May/17 00:51

Description

HttpServer2#loadSSLConfiguration loads 5 SSL properties but only keystore location and password are required, the rest of them, keystore keypassword, truststore location, and truststore password, can be optional.

According to http://www.eclipse.org/jetty/documentation/current/configuring-ssl.html:

• If there is no keymanagerpassword, then the keystorepassword is used instead.
• Trust store is typically set to the same path as the keystore.

Issue Links

• depends upon: HADOOP-13597 Switch KMS from Tomcat to Jetty