[SQOOP-2224] Provide tool for generating encrypted password files

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: tools
• Assignee: Unassigned
• Reporter: Abraham Elmahrek
• Created: 17/Mar/15 19:38
• Updated: 17/Mar/15 19:38

Description

Sqoop provides a few different options when decrypting password files. Unfortunately, key derivation varies from command line tool (and most command line tools are not complete (See openssl bug (https://www.openssl.org/docs/apps/enc.html) on key derivation + iterations)), so it makes sense to provide a tool that does the following:

1. Ask for a passphrase
2. Ask for salt or optionally generate salt
3. Optionally ask for an encryption algorithm
4. Optionally ask for iterations in key derivation
5. Encrypt a file using Sqoop's internal key derivation function (which is actually PBKDF2 With HMAC-SHA1).
6. Return generated salt