[HDFS-5273] Improve the documentation of SSL/HTTPS-related configuration

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Haohui Mai
• Reporter: Haohui Mai
• Created: 28/Sep/13 00:09
• Updated: 13/Nov/13 23:39

Description

There are multiple switches in the configuration related to HTTPS/SSL, some of which are confusing. For example, dfs.https.enable controls that whether http server will open another port for HTTPS connections, but when hadoop.ssl.enabled is set to true, the original HTTP server only serves HTTPS connections.

Combining other requirements of setting up secure clusters (e.g., the HTTP port has to be lower than 1024 for a secure datanode), we found that a well-written document is a must-have to overcome the pain of configuring an SSL/HTTPS-enabled cluster.

Issue Links

• is related to: HADOOP-10086 User document for authentication in secure cluster