[
https://issues.apache.org/jira/browse/IMPALA-14932?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Yida Wu resolved IMPALA-14932.
------------------------------
Fix Version/s: Impala 5.0.0
Resolution: Fixed
> Disable ai_generate_text in FIPS mode
> -------------------------------------
>
> Key: IMPALA-14932
> URL: https://issues.apache.org/jira/browse/IMPALA-14932
> Project: IMPALA
> Issue Type: Improvement
> Components: Backend
> Reporter: Yida Wu
> Assignee: Yida Wu
> Priority: Major
> Fix For: Impala 5.0.0
>
>
> Impala AI functions ai_generate_text, ai_generate_text_default rely on JCEKS
> for credential storage. These functions support two credential types, JCEKS
> and plain. However, JCEKS uses non-FIPS-approved algorithms, and
> credential_type="plain" is also not FIPS-compliant. Therefore, these
> functions should be better to disable in FIPS mode for now. Support for
> FIPS-compliant keystores for credential (e.g., BCFKS) may be explored in the
> future.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
