[ https://issues.apache.org/jira/browse/HIVE-18728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Zoltan Haindrich updated HIVE-18728: ------------------------------------ Fix Version/s: (was: 3.2.0) 4.0.0 Resolution: Fixed Status: Resolved (was: Patch Available) merged into master. Thank you [~osayankin]! > Secure webHCat with SSL > ----------------------- > > Key: HIVE-18728 > URL: https://issues.apache.org/jira/browse/HIVE-18728 > Project: Hive > Issue Type: New Feature > Components: Security > Reporter: Oleksiy Sayankin > Assignee: Oleksiy Sayankin > Priority: Major > Labels: pull-request-available > Fix For: 4.0.0 > > Attachments: HIVE-18728.1.patch, HIVE-18728.2.patch, > HIVE-18728.3.patch > > Time Spent: 50m > Remaining Estimate: 0h > > Doc for the issue: > *Configure WebHCat server to use SSL encryption* > You can configure WebHCat REST-API to use SSL (Secure Sockets Layer) > encryption. The following WebHCat properties are added to enable SSL. > {{templeton.use.ssl}} > Default value: {{false}} > Description: Set this to true for using SSL encryption for WebHCat server > {{templeton.keystore.path}} > Default value: {{<empty string>}} > Description: SSL certificate keystore location for WebHCat server > {{templeton.keystore.password}} > Default value: {{<empty string>}} > Description: SSL certificate keystore password for WebHCat server > {{templeton.ssl.protocol.blacklist}} > Default value: {{SSLv2,SSLv3}} > Description: SSL Versions to disable for WebHCat server > {{templeton.host}} > Default value: {{0.0.0.0}} > Description: The host address the WebHCat server will listen on. > *Modifying the {{webhcat-site.xml}} file* > Configure the following properties in the {{webhcat-site.xml}} file to enable > SSL encryption on each node where WebHCat is installed: > {code} > <!-- WebHCat SSL --> > <property> > <name>templeton.use.ssl</name> > <value>true</value> > </property> > <property> > <name>templeton.keystore.path</name> > <value>/path/to/ssl_keystore</value> > </property> > <property> > <name>templeton.keystore.password</name> > <value>password</value> > </property> > {code} > *Example:* To check status of WebHCat server configured for SSL encryption > use following command > {code} > curl -k 'https://<user>:<password>@<host>:50111/templeton/v1/status' > {code} > replace {{<user>}} and {{<password>}} with valid user/password. Replace > {{<host>}} with your host name. -- This message was sent by Atlassian Jira (v8.3.4#803005)