Mailing-List: contact hdfs-dev-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: hdfs-dev@hadoop.apache.org
Date: Tue, 16 Sep 2014 02:35:35 +0000 (UTC)
From: "Yi Yao (JIRA)" <jira@apache.org>
To: hdfs-dev@hadoop.apache.org
Message-ID: <JIRA.12741655.1410834902000.40998.1410834935269@Atlassian.JIRA>
In-Reply-To: <JIRA.12741655.1410834902000@Atlassian.JIRA>
References: <JIRA.12741655.1410834902000@Atlassian.JIRA>
 <JIRA.12741655.1410834902217@arcas>
Subject: [jira] [Created] (HDFS-7067) ClassCastException while using a key
 created by keytool to create encryption zone.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Yi Yao created HDFS-7067:
----------------------------

             Summary: ClassCastException while using a key created by keytool to create encryption zone. 
                 Key: HDFS-7067
                 URL: https://issues.apache.org/jira/browse/HDFS-7067
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: encryption
    Affects Versions: 2.6.0
            Reporter: Yi Yao
            Priority: Minor
             Fix For: 2.6.0


I'm using transparent encryption. If I create a key for KMS keystore via keytool and use the key to create an encryption zone. I get a ClassCastException rather than an exception with decent error message. I know we should use 'hadoop key create' to create a key. It's better to provide an decent error message to remind user to use the right way to create a KMS key.

[LOG]
ERROR[user=hdfs] Method:'GET' Exception:'java.lang.ClassCastException: javax.crypto.spec.SecretKeySpec cannot be cast to org.apache.hadoop.crypto.key.JavaKeyStoreProvider$KeyMetadata'


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)