[
https://issues.apache.org/jira/browse/HADOOP-17609?focusedWorklogId=597622&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-597622
]
ASF GitHub Bot logged work on HADOOP-17609:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 17/May/21 13:13
Start Date: 17/May/21 13:13
Worklog Time Spent: 10m
Work Description: iwasakims commented on pull request #3019:
URL: https://github.com/apache/hadoop/pull/3019#issuecomment-842313287
On CentOS 8, OpensslAesCtrCryptoCodec is available while
OpensslSm4CtrCryptoCodec is not.
```
$ bin/hadoop checknative
2021-05-17 13:02:39,196 DEBUG util.NativeCodeLoader: Trying to load the
custom-built native-hadoop library...
2021-05-17 13:02:39,197 DEBUG util.NativeCodeLoader: Loaded the
native-hadoop library
2021-05-17 13:02:39,324 INFO bzip2.Bzip2Factory: Successfully loaded &
initialized native-bzip2 library system-native
2021-05-17 13:02:39,327 INFO zlib.ZlibFactory: Successfully loaded &
initialized native-zlib library
2021-05-17 13:02:39,393 INFO nativeio.NativeIO: The native code was built
without PMDK support.
Native library checking:
hadoop: true
/home/centos/srcs/hadoop/hadoop-dist/target/hadoop-3.4.0-SNAPSHOT/lib/native/libhadoop.so.1.0.0
zlib: true /lib64/libz.so.1
zstd : true /lib64/libzstd.so.1
bzip2: true /lib64/libbz2.so.1
openssl: true /lib64/libcrypto.so
ISA-L: true /lib64/libisal.so.2
PMDK: false The native code was built without PMDK support.
$ bin/hadoop key create key-sm4 -cipher 'SM4/CTR/NoPadding'
$ bin/hdfs dfs -mkdir /zone1
$ bin/hdfs crypto -createZone -path /zone1 -keyName key-sm4
$ bin/hdfs dfs -put README.txt /zone1/
2021-05-17 13:05:25,570 DEBUG util.PerformanceAdvisory: Crypto codec
org.apache.hadoop.crypto.OpensslSm4CtrCryptoCodec is not available.
2021-05-17 13:05:25,570 DEBUG util.PerformanceAdvisory: Using crypto codec
org.apache.hadoop.crypto.JceSm4CtrCryptoCodec.
$ bin/hadoop key create key-aes
$ bin/hdfs dfs -mkdir /zone2
$ bin/hdfs crypto -createZone -path /zone2 -keyName key-aes
$ bin/hdfs dfs -put NOTICE.txt /zone2/
2021-05-17 13:09:04,773 DEBUG crypto.OpensslAesCtrCryptoCodec: Using
org.apache.hadoop.crypto.random.OpensslSecureRandom as random number generator.
2021-05-17 13:09:04,775 DEBUG util.PerformanceAdvisory: Using crypto codec
org.apache.hadoop.crypto.OpensslAesCtrCryptoCodec.
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 597622)
Time Spent: 2h 20m (was: 2h 10m)
> Make SM4 support optional for OpenSSL native code
> -------------------------------------------------
>
> Key: HADOOP-17609
> URL: https://issues.apache.org/jira/browse/HADOOP-17609
> Project: Hadoop Common
> Issue Type: Improvement
> Components: native
> Affects Versions: 3.4.0
> Reporter: Masatake Iwasaki
> Assignee: Masatake Iwasaki
> Priority: Major
> Labels: pull-request-available
> Time Spent: 2h 20m
> Remaining Estimate: 0h
>
> openssl-devel-1.1.1g provided by CentOS 8 does not work after HDFS-15098
> because the SM4 is not enabled on the openssl package. We should not force
> users to install OpenSSL from source code even if they do not use SM4 feature.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
