[OOZIE-3677] Oozie should accept a keyStoreType and trustStoreType property in oozie-site.xml

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Done
• Affects Version/s: 5.2.1
• Fix Version/s: 5.3.0
• Assignee: János Makai
• Reporter: János Makai
• Created: 30/Nov/22 09:34
• Updated: 05/Dec/22 10:01
• Resolved: 01/Dec/22 14:35

Description

In scope of making Oozie FIPS compliant, when TLS is enabled, the Oozie server expects a JKS KeyStore type even though the following Java system properties are being set:

-Djavax.net.ssl.keyStoreType=bcfks -Djavax.net.ssl.trustStoreType=bcfks

The goal of ticket is to make Oozie capable of setting keyStoreType and trustStoreType in oozie-site.xml if it's not already set by the user.