Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.8.0, 2.7.4, 2.6.6
    • Fix Version/s: 2.9.0
    • Component/s: httpfs
    • Labels:
      None
    • Target Version/s:

      Description

      HADOOP-13812 upgraded Tomcat to 6.0.48 which filters weak ciphers. Old SSL clients such as curl stop working. The symptom is NSS error -12286 when running curl -v.

      Instead of forcing the SSL clients to upgrade, we can configure Tomcat to explicitly allow enough weak ciphers so that old SSL clients can work.

      1. HDFS-11418.branch-2.001.patch
        5 kB
        John Zhuge
      2. HDFS-11418.branch-2.002.patch
        15 kB
        John Zhuge
      3. HDFS-11418.branch-2.003.patch
        15 kB
        John Zhuge

        Issue Links

          Activity

          Hide
          jzhuge John Zhuge added a comment -

          Committed to branch-2.

          Thanks Xiao Chen and Lei (Eddy) Xu for the review!

          Filed HDFS-11485 "HttpFS should warn about weak ssl ciphers" to follow up Eddy's suggestion.

          Show
          jzhuge John Zhuge added a comment - Committed to branch-2. Thanks Xiao Chen and Lei (Eddy) Xu for the review! Filed HDFS-11485 "HttpFS should warn about weak ssl ciphers" to follow up Eddy's suggestion.
          Hide
          eddyxu Lei (Eddy) Xu added a comment -

          Hi, John Zhuge

          The patch LGTM overall. +1.

          One thing that might be worth to do is adding a warning message to the script when HttpFS uses old SSL clients. We can do it in a follow up JIRA though.

          Thanks for the patch!

          Show
          eddyxu Lei (Eddy) Xu added a comment - Hi, John Zhuge The patch LGTM overall. +1. One thing that might be worth to do is adding a warning message to the script when HttpFS uses old SSL clients. We can do it in a follow up JIRA though. Thanks for the patch!
          Hide
          hadoopqa Hadoop QA added a comment -
          -1 overall



          Vote Subsystem Runtime Comment
          0 reexec 14m 58s Docker mode activated.
          0 shelldocs 0m 0s Shelldocs was not available.
          +1 @author 0m 0s The patch does not contain any @author tags.
          -1 test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
          +1 mvninstall 6m 39s branch-2 passed
          +1 compile 0m 18s branch-2 passed with JDK v1.8.0_121
          +1 compile 0m 20s branch-2 passed with JDK v1.7.0_121
          +1 mvnsite 0m 47s branch-2 passed
          +1 mvneclipse 0m 15s branch-2 passed
          +1 javadoc 0m 15s branch-2 passed with JDK v1.8.0_121
          +1 javadoc 0m 17s branch-2 passed with JDK v1.7.0_121
          +1 mvninstall 0m 20s the patch passed
          +1 compile 0m 15s the patch passed with JDK v1.8.0_121
          +1 javac 0m 15s the patch passed
          +1 compile 0m 17s the patch passed with JDK v1.7.0_121
          +1 javac 0m 17s the patch passed
          +1 mvnsite 0m 39s the patch passed
          +1 mvneclipse 0m 11s the patch passed
          +1 shellcheck 0m 8s The patch generated 0 new + 511 unchanged - 4 fixed = 511 total (was 515)
          +1 whitespace 0m 0s The patch has no whitespace issues.
          +1 xml 0m 1s The patch has no ill-formed XML file.
          +1 javadoc 0m 12s the patch passed with JDK v1.8.0_121
          +1 javadoc 0m 14s the patch passed with JDK v1.7.0_121
          +1 unit 3m 26s hadoop-hdfs-httpfs in the patch passed with JDK v1.7.0_121.
          +1 asflicense 0m 19s The patch does not generate ASF License warnings.
          35m 9s



          Subsystem Report/Notes
          Docker Image:yetus/hadoop:b59b8b7
          JIRA Issue HDFS-11418
          JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12855489/HDFS-11418.branch-2.003.patch
          Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit xml shellcheck shelldocs
          uname Linux 8edb594f9ab7 3.13.0-106-generic #153-Ubuntu SMP Tue Dec 6 15:44:32 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
          Build tool maven
          Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh
          git revision branch-2 / ff08f54
          Default Java 1.7.0_121
          Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_121 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_121
          shellcheck v0.4.5
          JDK v1.7.0_121 Test Results https://builds.apache.org/job/PreCommit-HDFS-Build/18500/testReport/
          modules C: hadoop-hdfs-project/hadoop-hdfs-httpfs U: hadoop-hdfs-project/hadoop-hdfs-httpfs
          Console output https://builds.apache.org/job/PreCommit-HDFS-Build/18500/console
          Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org

          This message was automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - -1 overall Vote Subsystem Runtime Comment 0 reexec 14m 58s Docker mode activated. 0 shelldocs 0m 0s Shelldocs was not available. +1 @author 0m 0s The patch does not contain any @author tags. -1 test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 mvninstall 6m 39s branch-2 passed +1 compile 0m 18s branch-2 passed with JDK v1.8.0_121 +1 compile 0m 20s branch-2 passed with JDK v1.7.0_121 +1 mvnsite 0m 47s branch-2 passed +1 mvneclipse 0m 15s branch-2 passed +1 javadoc 0m 15s branch-2 passed with JDK v1.8.0_121 +1 javadoc 0m 17s branch-2 passed with JDK v1.7.0_121 +1 mvninstall 0m 20s the patch passed +1 compile 0m 15s the patch passed with JDK v1.8.0_121 +1 javac 0m 15s the patch passed +1 compile 0m 17s the patch passed with JDK v1.7.0_121 +1 javac 0m 17s the patch passed +1 mvnsite 0m 39s the patch passed +1 mvneclipse 0m 11s the patch passed +1 shellcheck 0m 8s The patch generated 0 new + 511 unchanged - 4 fixed = 511 total (was 515) +1 whitespace 0m 0s The patch has no whitespace issues. +1 xml 0m 1s The patch has no ill-formed XML file. +1 javadoc 0m 12s the patch passed with JDK v1.8.0_121 +1 javadoc 0m 14s the patch passed with JDK v1.7.0_121 +1 unit 3m 26s hadoop-hdfs-httpfs in the patch passed with JDK v1.7.0_121. +1 asflicense 0m 19s The patch does not generate ASF License warnings. 35m 9s Subsystem Report/Notes Docker Image:yetus/hadoop:b59b8b7 JIRA Issue HDFS-11418 JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12855489/HDFS-11418.branch-2.003.patch Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit xml shellcheck shelldocs uname Linux 8edb594f9ab7 3.13.0-106-generic #153-Ubuntu SMP Tue Dec 6 15:44:32 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux Build tool maven Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh git revision branch-2 / ff08f54 Default Java 1.7.0_121 Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_121 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_121 shellcheck v0.4.5 JDK v1.7.0_121 Test Results https://builds.apache.org/job/PreCommit-HDFS-Build/18500/testReport/ modules C: hadoop-hdfs-project/hadoop-hdfs-httpfs U: hadoop-hdfs-project/hadoop-hdfs-httpfs Console output https://builds.apache.org/job/PreCommit-HDFS-Build/18500/console Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org This message was automatically generated.
          Hide
          jzhuge John Zhuge added a comment -

          Patch branch-2.003

          Show
          jzhuge John Zhuge added a comment - Patch branch-2.003 Fix the issue similar to HADOOP-14131
          Hide
          jzhuge John Zhuge added a comment -

          Fixing the similar issue to HADOOP-14131.

          Show
          jzhuge John Zhuge added a comment - Fixing the similar issue to HADOOP-14131 .
          Hide
          xiaochen Xiao Chen added a comment -

          Seems fine overall. I think this is a +1 pending the KMS equivalent HADOOP-14083 being done.

          Show
          xiaochen Xiao Chen added a comment - Seems fine overall. I think this is a +1 pending the KMS equivalent HADOOP-14083 being done.
          Hide
          hadoopqa Hadoop QA added a comment -
          -1 overall



          Vote Subsystem Runtime Comment
          0 reexec 0m 20s Docker mode activated.
          0 shelldocs 0m 1s Shelldocs was not available.
          +1 @author 0m 0s The patch does not contain any @author tags.
          -1 test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
          +1 mvninstall 6m 42s branch-2 passed
          +1 compile 0m 19s branch-2 passed with JDK v1.8.0_121
          +1 compile 0m 22s branch-2 passed with JDK v1.7.0_121
          +1 mvnsite 0m 45s branch-2 passed
          +1 mvneclipse 0m 16s branch-2 passed
          +1 javadoc 0m 15s branch-2 passed with JDK v1.8.0_121
          +1 javadoc 0m 18s branch-2 passed with JDK v1.7.0_121
          +1 mvninstall 0m 20s the patch passed
          +1 compile 0m 14s the patch passed with JDK v1.8.0_121
          +1 javac 0m 14s the patch passed
          +1 compile 0m 17s the patch passed with JDK v1.7.0_121
          +1 javac 0m 17s the patch passed
          +1 mvnsite 0m 38s the patch passed
          +1 mvneclipse 0m 12s the patch passed
          +1 shellcheck 0m 7s The patch generated 0 new + 514 unchanged - 4 fixed = 514 total (was 518)
          +1 whitespace 0m 0s The patch has no whitespace issues.
          +1 xml 0m 1s The patch has no ill-formed XML file.
          +1 javadoc 0m 12s the patch passed with JDK v1.8.0_121
          +1 javadoc 0m 14s the patch passed with JDK v1.7.0_121
          +1 unit 3m 37s hadoop-hdfs-httpfs in the patch passed with JDK v1.7.0_121.
          +1 asflicense 0m 19s The patch does not generate ASF License warnings.
          21m 6s



          Subsystem Report/Notes
          Docker Image:yetus/hadoop:b59b8b7
          JIRA Issue HDFS-11418
          JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12853455/HDFS-11418.branch-2.002.patch
          Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit xml shellcheck shelldocs
          uname Linux b7aba735a40f 3.13.0-107-generic #154-Ubuntu SMP Tue Dec 20 09:57:27 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
          Build tool maven
          Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh
          git revision branch-2 / 8a88e8e
          Default Java 1.7.0_121
          Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_121 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_121
          shellcheck v0.4.5
          JDK v1.7.0_121 Test Results https://builds.apache.org/job/PreCommit-HDFS-Build/18401/testReport/
          modules C: hadoop-hdfs-project/hadoop-hdfs-httpfs U: hadoop-hdfs-project/hadoop-hdfs-httpfs
          Console output https://builds.apache.org/job/PreCommit-HDFS-Build/18401/console
          Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org

          This message was automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - -1 overall Vote Subsystem Runtime Comment 0 reexec 0m 20s Docker mode activated. 0 shelldocs 0m 1s Shelldocs was not available. +1 @author 0m 0s The patch does not contain any @author tags. -1 test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 mvninstall 6m 42s branch-2 passed +1 compile 0m 19s branch-2 passed with JDK v1.8.0_121 +1 compile 0m 22s branch-2 passed with JDK v1.7.0_121 +1 mvnsite 0m 45s branch-2 passed +1 mvneclipse 0m 16s branch-2 passed +1 javadoc 0m 15s branch-2 passed with JDK v1.8.0_121 +1 javadoc 0m 18s branch-2 passed with JDK v1.7.0_121 +1 mvninstall 0m 20s the patch passed +1 compile 0m 14s the patch passed with JDK v1.8.0_121 +1 javac 0m 14s the patch passed +1 compile 0m 17s the patch passed with JDK v1.7.0_121 +1 javac 0m 17s the patch passed +1 mvnsite 0m 38s the patch passed +1 mvneclipse 0m 12s the patch passed +1 shellcheck 0m 7s The patch generated 0 new + 514 unchanged - 4 fixed = 514 total (was 518) +1 whitespace 0m 0s The patch has no whitespace issues. +1 xml 0m 1s The patch has no ill-formed XML file. +1 javadoc 0m 12s the patch passed with JDK v1.8.0_121 +1 javadoc 0m 14s the patch passed with JDK v1.7.0_121 +1 unit 3m 37s hadoop-hdfs-httpfs in the patch passed with JDK v1.7.0_121. +1 asflicense 0m 19s The patch does not generate ASF License warnings. 21m 6s Subsystem Report/Notes Docker Image:yetus/hadoop:b59b8b7 JIRA Issue HDFS-11418 JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12853455/HDFS-11418.branch-2.002.patch Optional Tests asflicense compile javac javadoc mvninstall mvnsite unit xml shellcheck shelldocs uname Linux b7aba735a40f 3.13.0-107-generic #154-Ubuntu SMP Tue Dec 20 09:57:27 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux Build tool maven Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh git revision branch-2 / 8a88e8e Default Java 1.7.0_121 Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_121 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_121 shellcheck v0.4.5 JDK v1.7.0_121 Test Results https://builds.apache.org/job/PreCommit-HDFS-Build/18401/testReport/ modules C: hadoop-hdfs-project/hadoop-hdfs-httpfs U: hadoop-hdfs-project/hadoop-hdfs-httpfs Console output https://builds.apache.org/job/PreCommit-HDFS-Build/18401/console Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org This message was automatically generated.
          Hide
          jzhuge John Zhuge added a comment -

          Patch branch-2.002

          • Use file catalina.properties to transfer HttpFS properties instead of env CATALINA_OPTS
          • Create catalina-default.properties to store default Tomcat properties
          • Update doc

          TODO

          • Discuss Allen's idea of strong security by default

          Follow up in a new JIRA

          • Refactor HttpFS scripts based on catalina.properties technique

          Testing done

          Show
          jzhuge John Zhuge added a comment - Patch branch-2.002 Use file catalina.properties to transfer HttpFS properties instead of env CATALINA_OPTS Create catalina-default.properties to store default Tomcat properties Update doc TODO Discuss Allen's idea of strong security by default Follow up in a new JIRA Refactor HttpFS scripts based on catalina.properties technique Testing done Run https://github.com/jzhuge/hadoop-bats-tests/blob/master/httpfs.bats in insecure and SSL single node setup Run sslscan to verify ciphers in the following test cases: No HTTPFS_SSL_CIPHERS, to allow HttpFS default ciphers HTTPFS_SSL_CIPHERS=“TLS_RSA_WITH_AES_128_CBC_SHA256“, to allow this cipher only
          Hide
          hadoopqa Hadoop QA added a comment -
          -1 overall



          Vote Subsystem Runtime Comment
          0 reexec 13m 51s Docker mode activated.
          0 shelldocs 0m 13s Shelldocs was not available.
          +1 @author 0m 0s The patch does not contain any @author tags.
          -1 test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.
          +1 mvninstall 6m 58s branch-2 passed
          +1 compile 0m 20s branch-2 passed with JDK v1.8.0_121
          +1 compile 0m 20s branch-2 passed with JDK v1.7.0_121
          +1 mvnsite 0m 45s branch-2 passed
          +1 mvneclipse 0m 15s branch-2 passed
          +1 javadoc 0m 16s branch-2 passed with JDK v1.8.0_121
          +1 javadoc 0m 16s branch-2 passed with JDK v1.7.0_121
          +1 mvninstall 0m 21s the patch passed
          +1 compile 0m 17s the patch passed with JDK v1.8.0_121
          +1 javac 0m 17s the patch passed
          +1 compile 0m 17s the patch passed with JDK v1.7.0_121
          +1 javac 0m 17s the patch passed
          +1 mvnsite 0m 40s the patch passed
          +1 mvneclipse 0m 11s the patch passed
          -1 shellcheck 0m 7s The patch generated 18 new + 518 unchanged - 0 fixed = 536 total (was 518)
          +1 whitespace 0m 0s The patch has no whitespace issues.
          +1 xml 0m 1s The patch has no ill-formed XML file.
          +1 javadoc 0m 14s the patch passed with JDK v1.8.0_121
          +1 javadoc 0m 14s the patch passed with JDK v1.7.0_121
          +1 unit 3m 26s hadoop-hdfs-httpfs in the patch passed with JDK v1.7.0_121.
          +1 asflicense 0m 20s The patch does not generate ASF License warnings.
          34m 36s



          Subsystem Report/Notes
          Docker Image:yetus/hadoop:b59b8b7
          JIRA Issue HDFS-11418
          JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12852895/HDFS-11418.branch-2.001.patch
          Optional Tests asflicense mvnsite unit shellcheck shelldocs compile javac javadoc mvninstall xml
          uname Linux 63d601be64cb 3.13.0-107-generic #154-Ubuntu SMP Tue Dec 20 09:57:27 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
          Build tool maven
          Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh
          git revision branch-2 / 323782b
          Default Java 1.7.0_121
          Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_121 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_121
          shellcheck v0.4.5
          shellcheck https://builds.apache.org/job/PreCommit-HDFS-Build/18383/artifact/patchprocess/diff-patch-shellcheck.txt
          JDK v1.7.0_121 Test Results https://builds.apache.org/job/PreCommit-HDFS-Build/18383/testReport/
          modules C: hadoop-hdfs-project/hadoop-hdfs-httpfs U: hadoop-hdfs-project/hadoop-hdfs-httpfs
          Console output https://builds.apache.org/job/PreCommit-HDFS-Build/18383/console
          Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org

          This message was automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - -1 overall Vote Subsystem Runtime Comment 0 reexec 13m 51s Docker mode activated. 0 shelldocs 0m 13s Shelldocs was not available. +1 @author 0m 0s The patch does not contain any @author tags. -1 test4tests 0m 0s The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 mvninstall 6m 58s branch-2 passed +1 compile 0m 20s branch-2 passed with JDK v1.8.0_121 +1 compile 0m 20s branch-2 passed with JDK v1.7.0_121 +1 mvnsite 0m 45s branch-2 passed +1 mvneclipse 0m 15s branch-2 passed +1 javadoc 0m 16s branch-2 passed with JDK v1.8.0_121 +1 javadoc 0m 16s branch-2 passed with JDK v1.7.0_121 +1 mvninstall 0m 21s the patch passed +1 compile 0m 17s the patch passed with JDK v1.8.0_121 +1 javac 0m 17s the patch passed +1 compile 0m 17s the patch passed with JDK v1.7.0_121 +1 javac 0m 17s the patch passed +1 mvnsite 0m 40s the patch passed +1 mvneclipse 0m 11s the patch passed -1 shellcheck 0m 7s The patch generated 18 new + 518 unchanged - 0 fixed = 536 total (was 518) +1 whitespace 0m 0s The patch has no whitespace issues. +1 xml 0m 1s The patch has no ill-formed XML file. +1 javadoc 0m 14s the patch passed with JDK v1.8.0_121 +1 javadoc 0m 14s the patch passed with JDK v1.7.0_121 +1 unit 3m 26s hadoop-hdfs-httpfs in the patch passed with JDK v1.7.0_121. +1 asflicense 0m 20s The patch does not generate ASF License warnings. 34m 36s Subsystem Report/Notes Docker Image:yetus/hadoop:b59b8b7 JIRA Issue HDFS-11418 JIRA Patch URL https://issues.apache.org/jira/secure/attachment/12852895/HDFS-11418.branch-2.001.patch Optional Tests asflicense mvnsite unit shellcheck shelldocs compile javac javadoc mvninstall xml uname Linux 63d601be64cb 3.13.0-107-generic #154-Ubuntu SMP Tue Dec 20 09:57:27 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux Build tool maven Personality /testptch/hadoop/patchprocess/precommit/personality/provided.sh git revision branch-2 / 323782b Default Java 1.7.0_121 Multi-JDK versions /usr/lib/jvm/java-8-oracle:1.8.0_121 /usr/lib/jvm/java-7-openjdk-amd64:1.7.0_121 shellcheck v0.4.5 shellcheck https://builds.apache.org/job/PreCommit-HDFS-Build/18383/artifact/patchprocess/diff-patch-shellcheck.txt JDK v1.7.0_121 Test Results https://builds.apache.org/job/PreCommit-HDFS-Build/18383/testReport/ modules C: hadoop-hdfs-project/hadoop-hdfs-httpfs U: hadoop-hdfs-project/hadoop-hdfs-httpfs Console output https://builds.apache.org/job/PreCommit-HDFS-Build/18383/console Powered by Apache Yetus 0.5.0-SNAPSHOT http://yetus.apache.org This message was automatically generated.
          Hide
          jzhuge John Zhuge added a comment -

          Patch branch-2.001

          • Add env HTTPFS_SSL_CIPHERS, default to a list of selected ciphers
          • Configure Tomcat to accept a list of ciphers

          TODO

          • Discuss Allen's idea of strong security by default

          Testing done

          • hadoop-hdfs-httpfs unit tests
          • Verify HTTPFS_SSL_CIPHERS value on stdout during httpfs startup
          • Run https://github.com/jzhuge/hadoop-bats-tests/blob/master/httpfs.bats in insecure, SSL, and SSL+Kerberos single node setup
          • Sslcan result should include only listed ciphers
          • On Centos 6.6, run the following curl command. Expect NSS error -12286 without the fix.
            curl -v -k --negotiate -u: -sS 'https://HTTPFS_HOST:14000/webhdfs/v1/?op=liststatus'
            
          Show
          jzhuge John Zhuge added a comment - Patch branch-2.001 Add env HTTPFS_SSL_CIPHERS, default to a list of selected ciphers Configure Tomcat to accept a list of ciphers TODO Discuss Allen's idea of strong security by default Testing done hadoop-hdfs-httpfs unit tests Verify HTTPFS_SSL_CIPHERS value on stdout during httpfs startup Run https://github.com/jzhuge/hadoop-bats-tests/blob/master/httpfs.bats in insecure, SSL, and SSL+Kerberos single node setup Sslcan result should include only listed ciphers On Centos 6.6, run the following curl command. Expect NSS error -12286 without the fix. curl -v -k --negotiate -u: -sS 'https://HTTPFS_HOST:14000/webhdfs/v1/?op=liststatus'

            People

            • Assignee:
              jzhuge John Zhuge
              Reporter:
              jzhuge John Zhuge
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development