[HBASE-25267] Add SSL keystore type and truststore related configs for HBase RESTServer

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-1, 2.4.0, 2.2.7, 2.3.4
• Component/s: REST
• Assignee: Mate Szalay-Beko
• Reporter: Mate Szalay-Beko
• Created: 10/Nov/20 15:22
• Updated: 13/Nov/20 18:18
• Resolved: 12/Nov/20 11:47

Description

The RESTServer currently relies on the following parameters to configure SSL on the REST API:

• hbase.rest.ssl.enabled
• hbase.rest.ssl.keystore.store
• hbase.rest.ssl.keystore.password
• hbase.rest.ssl.keystore.keypassword
• hbase.rest.ssl.exclude.cipher.suites
• hbase.rest.ssl.include.cipher.suites
• hbase.rest.ssl.exclude.protocols
• hbase.rest.ssl.include.protocols

In this patch I want to introduce the following new parameters:

• hbase.rest.ssl.keystore.type
• hbase.rest.ssl.truststore.store
• hbase.rest.ssl.truststore.password
• hbase.rest.ssl.truststore.type

If any of the new the parameter is not provided, then we should fall-back to the current behaviour (e.g. assuming JKS keystore/truststore types, or no passwords, or no custom trust store file).

Issue Links

• links to: GitHub Pull Request #2642