[HADOOP-17284] Support BCFKS keystores for Hadoop Credential Provider

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.1, 3.4.0
• Component/s: security
• Labels: pull-request-available
• Target Version/s: 3.3.1, 3.4.0
• Hadoop Flags: Reviewed
• Assignee: Xiaoyu Yao
• Reporter: Xiaoyu Yao
• Created: 24/Sep/20 20:16
• Updated: 11/Feb/24 06:50
• Resolved: 30/Sep/20 03:16

Description

Hadoop Credential Provider provides an extensible mechanism to manage sensitive tokens like passwords for the cluster. It currently only support JCEKS store type from JDK.

This ticket is opened to add support BCFKS (Bouncy Castle FIPS) key store type for some higher security requirement use cases assuming OS/JDK has been updated with FIPS security provider for Java Security.

Issue Links

• links to: GitHub Pull Request #2334
• links to: GitHub Pull Request #3010