[HADOOP-17069] The default password(none) in JavaKeyStoreProvider, is no-longer useful.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 3.2.1, 3.4.0
• Component/s: kms
• Assignee: Unassigned
• Reporter: Prashant Sharma
• Created: 08/Jun/20 14:24
• Updated: 09/Jun/20 12:33
• Resolved: 09/Jun/20 12:33

Description

Since, the java keytool does not allow us to create a keystore with password length less than 6 characters(i.e. none), we should consider updating the password to a 6 char length (e.g. nopass).

$ keytool -genkeypair -storetype jceks -keyalg RSA -alias kms -keystore `pwd`/keystore4 -storepass none
keytool error: java.lang.Exception: Keystore password must be at least 6 characters
$ java -version
openjdk version "1.8.0_252"
OpenJDK Runtime Environment (build 1.8.0_252-8u252-b09-1ubuntu1-b09)
OpenJDK 64-Bit Server VM (build 25.252-b09, mixed mode)