Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-16524

Automatic keystore reloading for HttpServer2

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 3.3.1, 3.4.0
    • None
    • Reviewed
    • Hide
      Adds auto-reload of keystore.

      Adds below new config (default 10 seconds):

       ssl.{0}.stores.reload.interval

      The refresh interval used to check if either of the truststore or keystore certificate file has changed.
      Show
      Adds auto-reload of keystore. Adds below new config (default 10 seconds):  ssl.{0}.stores.reload.interval The refresh interval used to check if either of the truststore or keystore certificate file has changed.

    Description

      Jetty 9 simplified reloading of keystore.   This allows hadoop daemon's SSL cert to be updated in place without having to restart the service.

      Attachments

        1. HADOOP-16524.patch
          2 kB
          Kihwal Lee

        Issue Links

        breaks

        Bug - A problem which impairs or prevents the functions of the product. YARN-10568 TestTimelineClient#testTimelineClientCleanup fails on trunk

        • Major - Major loss of function.
        • Open
        is related to

        Bug - A problem which impairs or prevents the functions of the product. HADOOP-17608 Fix TestKMS failure

        • Major - Major loss of function.
        • Resolved
        relates to

        Bug - A problem which impairs or prevents the functions of the product. HDFS-16002 TestJournalNodeRespectsBindHostKeys#testHttpsBindHostKey very flaky

        • Major - Major loss of function.
        • Resolved
        links to

        Web Link GitHub Pull Request #2470

        Web Link GitHub Pull Request #2609

        Web Link pr2693

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            borislav.iordanov Borislav Iordanov
            kihwal Kihwal Lee
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 6h 10m
                6h 10m

                Slack

                  Issue deployment