[HIVE-24253] HMS and HS2 needs to support keystore/truststores types besides JKS by config

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-alpha-1
• Component/s: HiveServer2, Standalone Metastore
• Labels: pull-request-available
• Assignee: Yongzhi Chen
• Reporter: Yongzhi Chen
• Created: 09/Oct/20 13:36
• Updated: 08/Sep/23 17:16
• Resolved: 29/Oct/20 01:04

Description

When HiveMetaStoreClient connects to HMS with enabled SSL, HMS should support the Keystore type configurable and default to keystore type specified for the JDK and not always use JKS. Same as HIVE-23958 for hive, HMS should support to set additional keystore/truststore types used for different applications like for FIPS crypto algorithms.
Also, make hive keystore type and algorithm configurable.

Issue Links

• is depended upon by: HIVE-27675 Support keystore/truststore types for hive to zookeeper integration points
• links to: GitHub Pull Request #1580