hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Mike Yoder (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-6391) Get the Key/IV from the NameNode for encrypted files in DFSClient
Date Fri, 20 Jun 2014 23:36:25 GMT

    [ https://issues.apache.org/jira/browse/HDFS-6391?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14039540#comment-14039540
] 

Mike Yoder commented on HDFS-6391:
----------------------------------

One further detail I forgot to mention - the client cipher list is _ordered_.  So the client
really does have a lot of control, but the server side has the final say depending on what
it can support.

> Get the Key/IV from the NameNode for encrypted files in DFSClient
> -----------------------------------------------------------------
>
>                 Key: HDFS-6391
>                 URL: https://issues.apache.org/jira/browse/HDFS-6391
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: namenode, security
>            Reporter: Alejandro Abdelnur
>            Assignee: Andrew Wang
>         Attachments: HDFS-6391.1.patch
>
>
> When creating/opening and encrypted file, the DFSClient should get the encryption key
material and the IV for the file in the create/open RPC call.
> HDFS admin users would never get key material/IV on encrypted files create/open.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message