HADOOP-8141. Add method to SecurityUtil to init krb5 cipher suites. Contributed by Todd Lipcon.

git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/branches/branch-0.23@1298035 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Todd Lipcon 2012-03-07 18:42:46 +00:00
parent 21e7ea0f9a
commit 52007208ba
3 changed files with 11 additions and 1 deletions

View File

@ -71,6 +71,9 @@ Release 0.23.3 - UNRELEASED
HADOOP-8142. Update versions from 0.23.2 to 0.23.3 in the build files. HADOOP-8142. Update versions from 0.23.2 to 0.23.3 in the build files.
(szetszwo) (szetszwo)
HADOOP-8141. Add method to SecurityUtil to init krb5 cipher suites.
(todd)
OPTIMIZATIONS OPTIMIZATIONS
BUG FIXES BUG FIXES

View File

@ -58,7 +58,7 @@ public class Krb5AndCertsSslSocketConnector extends SslSocketConnector {
Collections.unmodifiableList(Collections.singletonList( Collections.unmodifiableList(Collections.singletonList(
"TLS_KRB5_WITH_3DES_EDE_CBC_SHA")); "TLS_KRB5_WITH_3DES_EDE_CBC_SHA"));
static { static {
System.setProperty("https.cipherSuites", KRB5_CIPHER_SUITES.get(0)); SecurityUtil.initKrb5CipherSuites();
} }
private static final Log LOG = LogFactory private static final Log LOG = LogFactory

View File

@ -598,4 +598,11 @@ public class SecurityUtil {
searchDomains = Arrays.asList(domains); searchDomains = Arrays.asList(domains);
} }
} }
public static void initKrb5CipherSuites() {
if (UserGroupInformation.isSecurityEnabled()) {
System.setProperty("https.cipherSuites",
Krb5AndCertsSslSocketConnector.KRB5_CIPHER_SUITES.get(0));
}
}
} }