hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Wang (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HDFS-7181) Remove incorrect precondition check on key length in FileEncryptionInfo
Date Thu, 02 Oct 2014 18:17:34 GMT

     [ https://issues.apache.org/jira/browse/HDFS-7181?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Andrew Wang updated HDFS-7181:
------------------------------
    Attachment: hdfs-7181.001.patch

Patch attached. It's hard to unit test this, since it requires having the unlimited strength
JCE installed, which has export restrictions.

I tested this manually by creating a 256bit key, creating a new zone with this, and writing
and reading some files. I tested with JKS, going to do a quick KMS test as well.

> Remove incorrect precondition check on key length in FileEncryptionInfo
> -----------------------------------------------------------------------
>
>                 Key: HDFS-7181
>                 URL: https://issues.apache.org/jira/browse/HDFS-7181
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: encryption
>    Affects Versions: 2.6.0
>            Reporter: Andrew Wang
>            Assignee: Andrew Wang
>            Priority: Critical
>         Attachments: hdfs-7181.001.patch
>
>
> We have a bad precondition check left over from a long ago CipherSuite refactor. This
currently prevents using keys of a length other than 128bits.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message