[ 
https://issues.apache.org/jira/browse/HADOOP-10429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13947572#comment-13947572
 ] 

Alejandro Abdelnur commented on HADOOP-10429:
---------------------------------------------

[~lmccay], agree 100%. The patch adds new methods, but it does not remove the 
old ones, both work, and the default impl of the new signature uses the old 
one. This means that if you have a custom provider already, it will work just 
fine and it will have the new functionality.

> KeyStores should have methods to generate the materials themselves, KeyShell 
> should use them
> --------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-10429
>                 URL: https://issues.apache.org/jira/browse/HADOOP-10429
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 3.0.0
>            Reporter: Alejandro Abdelnur
>            Assignee: Alejandro Abdelnur
>         Attachments: HADOOP-10429.patch
>
>
> Currently, the {{KeyProvider}} API expects the caller to provide the key 
> materials. And, the {{KeyShell}} generates key materials.
> For security reasons, {{KeyProvider}} implementations may want to generate 
> and hide (from the user generating the key) the key materials.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to