[
https://issues.apache.org/jira/browse/HADOOP-17609?focusedWorklogId=597553&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-597553
]
ASF GitHub Bot logged work on HADOOP-17609:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 17/May/21 11:24
Start Date: 17/May/21 11:24
Worklog Time Spent: 10m
Work Description: iwasakims opened a new pull request #3019:
URL: https://github.com/apache/hadoop/pull/3019
https://issues.apache.org/jira/browse/HADOOP-17609
This replaces #2847.
After HDFS-15098, OpensslCipher does not work with OpenSSL >= 1.1.1 without
SM4 support. RHEL/CentOS 8 provides such openssl package. The OpensslCipher on
such environment should be usable if users do not need SM4 feature.
```
$ rpm -q openssl-devel
openssl-devel-1.1.1g-12.el8_3.x86_64
$ bin/hadoop checknative 2>/dev/null
Native library checking:
hadoop: true
/home/centos/dist/hadoop-3.4.0-SNAPSHOT/lib/native/libhadoop.so.1.0.0
zlib: true /lib64/libz.so.1
zstd : true /lib64/libzstd.so.1
bzip2: true /lib64/libbz2.so.1
openssl: false Cannot find AES-CTR/SM4-CTR support, is your version of
Openssl new enough?
ISA-L: true /lib64/libisal.so.2
PMDK: false The native code was built without PMDK support.
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 597553)
Time Spent: 1.5h (was: 1h 20m)
> Make SM4 support optional for OpenSSL native code
> -------------------------------------------------
>
> Key: HADOOP-17609
> URL: https://issues.apache.org/jira/browse/HADOOP-17609
> Project: Hadoop Common
> Issue Type: Improvement
> Components: native
> Affects Versions: 3.4.0
> Reporter: Masatake Iwasaki
> Assignee: Masatake Iwasaki
> Priority: Major
> Labels: pull-request-available
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> openssl-devel-1.1.1g provided by CentOS 8 does not work after HDFS-15098
> because the SM4 is not enabled on the openssl package. We should not force
> users to install OpenSSL from source code even if they do not use SM4 feature.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
