Configure HDFS for SSL

[#1]

Hi,

I am trying to configure HDFS for SSL certificate and following the instructions on the document on End to End wire encryption with Knox.

Not sure how to set these properties in Ambari UI. Any help would be appreciated. Thanks

Use Ambari to set the following properties in core-site.xml.

[code language=”XML”] hadoop.ssl.require.client.cert=false hadoop.ssl.hostname.verifier=DEFAULT_AND_LOCALHOST hadoop.ssl.keystores.factory.class=org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory hadoop.ssl.server.conf=ssl-server.xml [/code]

Use Ambari to set the following properties in hdfs-site.xml.

[code language=”XML”] dfs.http.policy=HTTPS_ONLY dfs.datanode.https.address=workshop.hortonworks.com:50475 [/code]

The valid values for dfs.http.policy are HTTPS_ONLY & HTTP_AND_HTTPS.

The valid values for hadoop.ssl.hostname.verifier are DEFAULT, STRICT,STRICT_I6, DEFAULT_AND_LOCALHOST and ALLOW_ALL. Only use ALLOW_ALL in a controlled environment & with caution. And then use ambari to restart all hdfs services.

[#2]

@Melvin Bandi check namenode service, connectivity on both client and server. Usually it means the server is not accepting connections from client.

[#3]

Yes Namenode service seems to be stopped. I restarted it but the status seems to be Stopped.

NameNode	Stopped
SNameNode	Stopped
DataNodes	0/1 Started

[#4]

@Kevin Minder

[#5]

@Kevin Minder Hi Kevin...Any update on this?

[#6]

@Melvin Bandi

I realize what the hold up is, this case is not tagged with security. I suggest you open a new case with this specific issue as the topic of this case is configuration. Tag the new case with security, SSL, etc.