Philip Zeyliger created IMPALA-7035:
---------------------------------------

             Summary: Impala HDFS Encryption tests failing after OpenJDK update
                 Key: IMPALA-7035
                 URL: https://issues.apache.org/jira/browse/IMPALA-7035
             Project: IMPALA
          Issue Type: Task
            Reporter: Philip Zeyliger


I have seen {{impala-py.test tests/metadata/test_hdfs_encryption.py}} fail with 
the following error:

{{E AssertionError: Error creating encryption zone: RemoteException: Can't 
recover key for testkey1 from keystore 
[file:/home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore|file:///home/impdev/Impala/testdata/cluster/cdh6/node-1/data/kms.keystore]}}

I believe what's going on is described in 
https://issues.apache.org/jira/browse/HDFS-13494. In short, the JDK now has a 
special whitelist for an API as a result of a security vulnerability.

A workaround in the KMS init script to configure $HADOOP_OPTS seems to do the 
trick.

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org

Reply via email to