[ https://issues.apache.org/jira/browse/HDFS-8509?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15147288#comment-15147288 ]
Steve Loughran commented on HDFS-8509: -------------------------------------- Wellington, Updating versions of things is something we are always scared of: something else breaks. I don't think anyone wants to stay on tomcat 6; there's been a JIRAs for moving off it for a while. # we can/should do this for trunk # I don't know about the branch-2 line # you need to submit the same patch as a diff for Hadoop core (stick it under HADOOP-10076 with that retitled for "tomcat 8"); that will make the patch visible to more than just the HDFS team: which is essential here. # you'll probably have to explain/justify some of the web.xml changes, e.g. why different valves, why the hard coded 150 for thread count, etc, etc > Move to tomcat 8.0.21 to support different passwords for key and keystore on > HTTPFS using SSL > --------------------------------------------------------------------------------------------- > > Key: HDFS-8509 > URL: https://issues.apache.org/jira/browse/HDFS-8509 > Project: Hadoop HDFS > Issue Type: Improvement > Components: build, webhdfs > Affects Versions: 2.7.0 > Reporter: Wellington Chevreuil > Assignee: Wellington Chevreuil > Priority: Minor > Attachments: HDFS-8509.patch > > > Currently, SSL for HTTPFS requires that keystore/truststore and key passwords > be the same. This is a limitation from Tomcat version 6, which didn't have > support for different passwords. From Tomcat 7, this is now possible by > defining "keyPass" property for "Connector" configuration on Tomcat's > server.xml file. -- This message was sent by Atlassian JIRA (v6.3.4#6332)