hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oleksiy Sayankin (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HIVE-18728) Secure webHCat with SSL
Date Fri, 16 Feb 2018 14:15:00 GMT

     [ https://issues.apache.org/jira/browse/HIVE-18728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Oleksiy Sayankin updated HIVE-18728:
------------------------------------
    Description: 
Doc for the issue:

*Configure WebHCat server to use SSL encryption*

You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) encryption. The following
WebHCat properties are added to enable SSL. 

{{templeton.use.ssl}}
Default value: {{false}}
Description: Set this to true for using SSL encryption for  WebHCat server

{{templeton.keystore.path}}
Default value: {{<empty string>}}
Description: SSL certificate keystore location for WebHCat server

{{templeton.keystore.password}}
Default value: {{<empty string>}}
Description: SSL certificate keystore password for WebHCat server

{{templeton.ssl.protocol.blacklist}}
Default value: {{SSLv2,SSLv3}}
Description: SSL Versions to disable for WebHCat server

{{templeton.host}}
Default value: {{0.0.0.0}}
Description: The host address the WebHCat server will listen on.


*Modifying the {{webhcat-site.xml}} file*

Configure the following properties in the {{webhcat-site.xml}} file to enable SSL encryption
on each node where WebHCat is installed: 

{code}
<!-- WebHCat SSL -->
<property>
  <name>templeton.use.ssl</name>
  <value>true</value>
</property>

<property>
  <name>templeton.keystore.path</name>
  <value>/path/to/ssl_keystore</value>
</property>

<property>
  <name>templeton.keystore.password</name>
  <value>password</value>
</property>
{code}

*Example:* To check status of WebHCat server configured for SSL encryption use following command

{code}
curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status'
{code}

replace {{<user>}} and {{<password>}} with valid user/password.  Replace {{<host>}}
with your host name.

  was:
*Configure WebHCat server to use SSL encryption*

You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) encryption. The following
WebHCat properties are added to enable SSL. 

{{templeton.use.ssl}}
Default value: {{false}}
Description: Set this to true for using SSL encryption for  WebHCat server

{{templeton.keystore.path}}
Default value: {{<empty string>}}
Description: SSL certificate keystore location for WebHCat server

{{templeton.keystore.password}}
Default value: {{<empty string>}}
Description: SSL certificate keystore password for WebHCat server

{{templeton.ssl.protocol.blacklist}}
Default value: {{SSLv2,SSLv3}}
Description: SSL Versions to disable for WebHCat server

{{templeton.host}}
Default value: {{0.0.0.0}}
Description: The host address the WebHCat server will listen on.


*Modifying the {{webhcat-site.xml}} file*

Configure the following properties in the {{webhcat-site.xml}} file to enable SSL encryption
on each node where WebHCat is installed: 

{code}
<!-- WebHCat SSL -->
<property>
  <name>templeton.use.ssl</name>
  <value>true</value>
</property>

<property>
  <name>templeton.keystore.path</name>
  <value>/path/to/ssl_keystore</value>
</property>

<property>
  <name>templeton.keystore.password</name>
  <value>password</value>
</property>
{code}

*Example:* To check status of WebHCat server configured for SSL encryption use following command

{code}
curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status'
{code}

replace {{<user>}} and {{<password>}} with valid user/password.  Replace {{<host>}}
with your host name.


> Secure webHCat with SSL
> -----------------------
>
>                 Key: HIVE-18728
>                 URL: https://issues.apache.org/jira/browse/HIVE-18728
>             Project: Hive
>          Issue Type: New Feature
>            Reporter: Oleksiy Sayankin
>            Assignee: Oleksiy Sayankin
>            Priority: Major
>             Fix For: 3.0.0
>
>         Attachments: HIVE-18728.1.patch
>
>
> Doc for the issue:
> *Configure WebHCat server to use SSL encryption*
> You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) encryption. The
following WebHCat properties are added to enable SSL. 
> {{templeton.use.ssl}}
> Default value: {{false}}
> Description: Set this to true for using SSL encryption for  WebHCat server
> {{templeton.keystore.path}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore location for WebHCat server
> {{templeton.keystore.password}}
> Default value: {{<empty string>}}
> Description: SSL certificate keystore password for WebHCat server
> {{templeton.ssl.protocol.blacklist}}
> Default value: {{SSLv2,SSLv3}}
> Description: SSL Versions to disable for WebHCat server
> {{templeton.host}}
> Default value: {{0.0.0.0}}
> Description: The host address the WebHCat server will listen on.
> *Modifying the {{webhcat-site.xml}} file*
> Configure the following properties in the {{webhcat-site.xml}} file to enable SSL encryption
on each node where WebHCat is installed: 
> {code}
> <!-- WebHCat SSL -->
> <property>
>   <name>templeton.use.ssl</name>
>   <value>true</value>
> </property>
> <property>
>   <name>templeton.keystore.path</name>
>   <value>/path/to/ssl_keystore</value>
> </property>
> <property>
>   <name>templeton.keystore.password</name>
>   <value>password</value>
> </property>
> {code}
> *Example:* To check status of WebHCat server configured for SSL encryption use following
command
> {code}
> curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status'
> {code}
> replace {{<user>}} and {{<password>}} with valid user/password.  Replace
{{<host>}} with your host name.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message