Package org.apache.hadoop.security.alias

Class BouncyCastleFipsKeyStoreProvider

java.lang.Object

org.apache.hadoop.security.alias.CredentialProvider

org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

org.apache.hadoop.security.alias.KeyStoreProvider

org.apache.hadoop.security.alias.BouncyCastleFipsKeyStoreProvider

@Private
public final class BouncyCastleFipsKeyStoreProvider
extends KeyStoreProvider

CredentialProvider based on Bouncy Castle FIPS KeyStore file format. The file may be stored in any Hadoop FileSystem using the following name mangling: bcfks://hdfs@nn1.example.com/my/creds.bcfks -> hdfs://nn1.example.com/my/creds.bcfks bcfks://file/home/larry/creds.bcfks -> file:///home/user1/creds.bcfks

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	BouncyCastleFipsKeyStoreProvider.Factory	The factory to create JksProviders, which is used by the ServiceLoader.

Nested classes/interfaces inherited from class org.apache.hadoop.security.alias.CredentialProvider

CredentialProvider.CredentialEntry

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALGORITHM
static final String	KEYSTORE_TYPE
static final String	SCHEME_NAME

Fields inherited from class org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

CREDENTIAL_PASSWORD_DEFAULT, CREDENTIAL_PASSWORD_ENV_VAR, CREDENTIAL_PASSWORD_FILE_KEY, LOG

Fields inherited from class org.apache.hadoop.security.alias.CredentialProvider

CLEAR_TEXT_FALLBACK

Method Summary

Modifier and Type	Method	Description
protected String	getAlgorithm()
protected String	getKeyStoreType()
protected String	getSchemeName()

Methods inherited from class org.apache.hadoop.security.alias.KeyStoreProvider

createPermissions, getInputStreamForFile, getOutputStreamForKeystore, initFileSystem, keystoreExists, stashOriginalFilePermissions

Methods inherited from class org.apache.hadoop.security.alias.AbstractJavaKeyStoreProvider

bytesToChars, createCredentialEntry, deleteCredentialEntry, flush, getAliases, getConf, getCredentialEntry, getKeyStore, getPassword, getPath, getPathAsString, getReadLock, getUri, getWriteLock, isChanged, needsPassword, noPasswordError, noPasswordWarning, setChanged, setPassword, setPath, setReadLock, setWriteLock, toString

Methods inherited from class org.apache.hadoop.security.alias.CredentialProvider

isTransient

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Details

SCHEME_NAME

public static final String SCHEME_NAME

See Also:

• Constant Field Values

KEYSTORE_TYPE

public static final String KEYSTORE_TYPE

See Also:

• Constant Field Values

ALGORITHM

public static final String ALGORITHM

See Also:

• Constant Field Values

Method Details

getSchemeName

protected String getSchemeName()

Specified by:

getSchemeName in class AbstractJavaKeyStoreProvider

getKeyStoreType

protected String getKeyStoreType()

Specified by:

getKeyStoreType in class AbstractJavaKeyStoreProvider

getAlgorithm

protected String getAlgorithm()

Specified by:

getAlgorithm in class AbstractJavaKeyStoreProvider