Yida Wu created IMPALA-14932:
--------------------------------
Summary: Disable ai_generate_text in FIPS mode
Key: IMPALA-14932
URL: https://issues.apache.org/jira/browse/IMPALA-14932
Project: IMPALA
Issue Type: Improvement
Components: Backend
Reporter: Yida Wu
Assignee: Yida Wu
Impala AI functions ai_generate_text, ai_generate_text_default rely on JCEKS
for credential storage. These functions support two credential types, JCEKS and
plain. However, JCEKS uses non-FIPS-approved algorithms, and
credential_type="plain" is also not FIPS-compliant. Therefore, these functions
should be better to disable in FIPS mode for now. Support for FIPS-compliant
keystores for credential (e.g., BCFKS) may be explored in the future.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
