hadoop-hdfs-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Evert Lammerts (Created) (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HDFS-3059) ssl-server.xml causes NullPointer
Date Wed, 07 Mar 2012 16:34:57 GMT
ssl-server.xml causes NullPointer

                 Key: HDFS-3059
                 URL: https://issues.apache.org/jira/browse/HDFS-3059
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: data-node, security
    Affects Versions: 1.0.0,
         Environment: in core-site.xml:


in hdfs-site.xml:


    ...other security props

            Reporter: Evert Lammerts
            Priority: Minor

If ssl is enabled (dfs.https.enable) but ssl-server.xml is not available, a DN will crash
during startup while setting up an SSL socket with a NullPointerException:

{noformat}12/03/07 17:08:36 DEBUG security.Krb5AndCertsSslSocketConnector: useKerb = false,
useCerts = true
jetty.ssl.password : jetty.ssl.keypassword : 12/03/07 17:08:36 INFO mortbay.log: jetty-6.1.26.cloudera.1
12/03/07 17:08:36 INFO mortbay.log: Started SelectChannelConnector@p-worker35.alley.sara.nl:1006
12/03/07 17:08:36 DEBUG security.Krb5AndCertsSslSocketConnector: Creating new KrbServerSocket
12/03/07 17:08:36 WARN mortbay.log: java.lang.NullPointerException
12/03/07 17:08:36 WARN mortbay.log: failed Krb5AndCertsSslSocketConnector@ java.io.IOException:
!JsseListener: java.lang.NullPointerException
12/03/07 17:08:36 WARN mortbay.log: failed Server@604788d5: java.io.IOException: !JsseListener:
12/03/07 17:08:36 INFO mortbay.log: Stopped Krb5AndCertsSslSocketConnector@
12/03/07 17:08:36 INFO mortbay.log: Stopped SelectChannelConnector@p-worker35.alley.sara.nl:1006
12/03/07 17:08:37 INFO datanode.DataNode: Waiting for threadgroup to exit, active threads
is 0{noformat}

The same happens if I set an absolute path to an existing dfs.https.server.keystore.resource
- in this case the file cannot be found but not even a WARN is given.

Since in dfs.https.server.keystore.resource we know we need to have 4 properties specified
(ssl.server.truststore.location, ssl.server.keystore.location, ssl.server.keystore.password,
and ssl.server.keystore.keypassword) we should check if they are set and throw an IOException
if they are not.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


View raw message