hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sanjay M Pujare (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-6457) Allow custom SSL configuration to be supplied in WebApps
Date Fri, 28 Apr 2017 19:45:04 GMT

    [ https://issues.apache.org/jira/browse/YARN-6457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15989356#comment-15989356

Sanjay M Pujare commented on YARN-6457:

[~haibochen] thinking more about it, I can see how this can be made to work. I am thinking
the following code in WebAppUtils.loadSslConfiguration(Builder, Configuration) will do the

    if (sslConf == null) {
      sslConf = new Configuration(false);
    } else {
      String customSslServerConf = sslConf.get("hadoop.ssl.server.conf");  // TODO define
the string in YarnConfigruation or elsewhere
      if (customSslServerConf != null) {
          sslConf.addResource(new Path(customSslServerConf));
      } else {

Let me know if this is what you had in mind.

> Allow custom SSL configuration to be supplied in WebApps
> --------------------------------------------------------
>                 Key: YARN-6457
>                 URL: https://issues.apache.org/jira/browse/YARN-6457
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: webapp, yarn
>            Reporter: Sanjay M Pujare
>            Assignee: Sanjay M Pujare
>   Original Estimate: 96h
>  Remaining Estimate: 96h
> Currently a custom SSL store cannot be passed on to WebApps which forces the embedded
web-server to use the default keystore set up in ssl-server.xml for the whole Hadoop cluster.
There are cases where the Hadoop app needs to use its own/custom keystore.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org

View raw message