[HDFS-5538] URLConnectionFactory should pick up the SSL related configuration by default

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.3.0
• Hadoop Flags: Reviewed
• Assignee: Haohui Mai
• Reporter: Haohui Mai
• Created: 20/Nov/13 23:05
• Updated: 24/Feb/14 20:57
• Resolved: 26/Nov/13 01:18

Description

The default instance of URLConnectionFactory, DEFAULT_CONNECTION_FACTORY does not pick up any hadoop-specific, SSL-related configuration. Its customers have to set up the ConnectionConfigurator explicitly in order to pick up these configurations. This is less than ideal for HTTPS because whenever the code needs to make a HTTPS connection, the code is forced to go through the set up.

This jira refactors URLConnectionFactory to ease the handling of HTTPS connections (compared to the DEFAULT_CONNECTION_FACTORY we have right now). In particular, instead of loading the SSL configurator statically in SecurityUtil (based on a global configuration about SSL), and determine whether we should set up SSL for a given connection based on whether the SSL configurator is null, we now load the SSL configurator in URLConnectionFactory, and determine if we need to use the configurator to set up an SSL connection based on if the given URL/connection is https.