[HADOOP-17982] OpensslCipher initialization error should log a WARN message

• Type: Improvement
• Status: Resolved
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 3.4.0
• Component/s: kms, security
• Labels: pull-request-available
• Hadoop Flags: Reviewed
• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 28/Oct/21 23:34
• Updated: 30/Jul/24 08:05
• Resolved: 10/Dec/21 12:14

Description

We spent months troubleshooting a RangerKMS performance problem, only to realize that the openssl library wasn't even loaded properly.

The failure to load openssl lib is currently logged as a debug message during initialization. We really should upgrade it to at least INFO/WARN.

static {
    String loadingFailure = null;
    try {
      if (!NativeCodeLoader.buildSupportsOpenssl()) {
        PerformanceAdvisory.LOG.debug("Build does not support openssl");
        loadingFailure = "build does not support openssl.";
      } else {
        initIDs();
      }
    } catch (Throwable t) {
      loadingFailure = t.getMessage();
      LOG.debug("Failed to load OpenSSL Cipher.", t);
    } finally {
      loadingFailureReason = loadingFailure;
    }
  }

Issue Links

• is related to: SPARK-49055 Investigate OrcEncryptionSuite UnsatisfiedLinkError on AppleSilicon MacOS environment
• links to: GitHub Pull Request #3599