[ 
https://issues.apache.org/jira/browse/HADOOP-16524?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17326655#comment-17326655
 ] 

Borislav Iordanov commented on HADOOP-16524:
--------------------------------------------

hi [~ayushtkn] , [~stack] thanks for the instruction. I was able to reproduce 
the failure with your instructions. The issue is that it fails to load a 
configuration file (ssl-server.xml) and as a consequence the location of the 
SSL keystore is null. After playing with various options, I came to the 
conclusion that the failure happens only when the yarn-ui profile is enabled, 
but I couldn't figure out why that affects it. The file ssl-server.xml is 
expected to be under test-classes directly, but what we find there instead is a 
file named ssl-server-fork-1.xml, probably has to do with Maven fork options 
and parallel tests 
([https://maven.apache.org/surefire/maven-surefire-plugin/examples/fork-options-and-parallel-execution.html),]
 but I'm familiar with that to troubleshoot. 

 

However - the problem appears fixed on the latest commit on trunk and I'm only 
reproduce on the commit hash that I found from your link above. On the latest 
trunk, we have test-classes/ssl-server.xml so the file is found. So I'm 
guessing there were configuration changes that fixed it. 

 

What I could do is create a PR with a more helpful error that says "No keystore 
configured for HTTPS" or some such?

> Automatic keystore reloading for HttpServer2
> --------------------------------------------
>
>                 Key: HADOOP-16524
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16524
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Kihwal Lee
>            Assignee: Borislav Iordanov
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.3.1, 3.4.0
>
>         Attachments: HADOOP-16524.patch
>
>          Time Spent: 5h 50m
>  Remaining Estimate: 0h
>
> Jetty 9 simplified reloading of keystore.   This allows hadoop daemon's SSL 
> cert to be updated in place without having to restart the service.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to