Return-Path: X-Original-To: apmail-accumulo-notifications-archive@minotaur.apache.org Delivered-To: apmail-accumulo-notifications-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id F2256E66E for ; Sat, 26 Jan 2013 01:22:11 +0000 (UTC) Received: (qmail 4246 invoked by uid 500); 26 Jan 2013 01:22:11 -0000 Delivered-To: apmail-accumulo-notifications-archive@accumulo.apache.org Received: (qmail 4194 invoked by uid 500); 26 Jan 2013 01:22:11 -0000 Mailing-List: contact notifications-help@accumulo.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: jira@apache.org Delivered-To: mailing list notifications@accumulo.apache.org Received: (qmail 4074 invoked by uid 99); 26 Jan 2013 01:22:11 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 26 Jan 2013 01:22:11 +0000 Date: Sat, 26 Jan 2013 01:22:11 +0000 (UTC) From: "Hudson (JIRA)" To: notifications@accumulo.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (ACCUMULO-958) Support pluggable encryption in walogs MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/ACCUMULO-958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13563278#comment-13563278 ] Hudson commented on ACCUMULO-958: --------------------------------- Integrated in Accumulo-Trunk-Hadoop-2.0 #31 (See [https://builds.apache.org/job/Accumulo-Trunk-Hadoop-2.0/31/]) ACCUMULO-958 - Adding Michael's patch. I did some formatting checks and added an increased default replication for the dfs secret key implementation he provided. I also did some additional code suppression due to the API provided being volatiile. (Revision 1438786) Result = SUCCESS vines : Files : * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/conf/AccumuloConfiguration.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/conf/ConfigSanityCheck.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/conf/Property.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/CryptoModule.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/CryptoModuleFactory.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/DefaultCryptoModule.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/DefaultCryptoModuleUtils.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/DefaultSecretKeyEncryptionStrategy.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/SecretKeyEncryptionStrategy.java * /accumulo/trunk/core/src/main/java/org/apache/accumulo/core/security/crypto/SecretKeyEncryptionStrategyContext.java * /accumulo/trunk/server/src/main/java/org/apache/accumulo/server/tabletserver/log/DfsLogger.java * /accumulo/trunk/server/src/main/java/org/apache/accumulo/server/tabletserver/log/LogSorter.java > Support pluggable encryption in walogs > -------------------------------------- > > Key: ACCUMULO-958 > URL: https://issues.apache.org/jira/browse/ACCUMULO-958 > Project: Accumulo > Issue Type: Improvement > Components: logger > Reporter: John Vines > Assignee: Michael Allen > Fix For: 1.5.0 > > Attachments: ACCUMULO-958-actual-changes.patch, accumulo-958.diff > > > There are some cases where users want encryption at rest for the walogs. It should be fairly trivial to implement it in such a way to insert a CipherOutputStream into the data path (defaulting to using a NullCipher) and then making the Cipher pluggable to users can insert the appropriate mechanisms for their use case. > This also means swapping in CipherInputStream and putting in a check to make sure the Cipher type's match at read and write time. Possibly a versioning mechanism so people can migrate Ciphers. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira