Package org.apache.hadoop.yarn.server.webproxy

Class ProxyCA

java.lang.Object

org.apache.hadoop.yarn.server.webproxy.ProxyCA

@Private
@Unstable
public class ProxyCA
extends java.lang.Object

Allows for the generation and acceptance of specialized HTTPS Certificates to be used for HTTPS communication between the AMs and the RM Proxy.

Constructor Summary

Constructors

Constructor	Description
ProxyCA()

Method Summary

Modifier and Type	Method	Description
byte[]	createChildKeyStore(org.apache.hadoop.yarn.api.records.ApplicationId appId, java.lang.String ksPassword)
javax.net.ssl.SSLContext	createSSLContext(org.apache.hadoop.yarn.api.records.ApplicationId appId)
java.lang.String	generateKeyStorePassword()
java.security.cert.X509Certificate	getCaCert()
java.security.KeyPair	getCaKeyPair()
byte[]	getChildTrustStore(java.lang.String password)
javax.net.ssl.HostnameVerifier	getHostnameVerifier()
void	init()
void	init(java.security.cert.X509Certificate caCert, java.security.PrivateKey caPrivateKey)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ProxyCA

public ProxyCA()

Method Detail

init

public void init()
          throws java.security.GeneralSecurityException,
                 java.io.IOException

Throws:

java.security.GeneralSecurityException

java.io.IOException

init

public void init(java.security.cert.X509Certificate caCert,
                 java.security.PrivateKey caPrivateKey)
          throws java.security.GeneralSecurityException,
                 java.io.IOException

Throws:

java.security.GeneralSecurityException

java.io.IOException

createChildKeyStore

public byte[] createChildKeyStore(org.apache.hadoop.yarn.api.records.ApplicationId appId,
                                  java.lang.String ksPassword)
                           throws java.lang.Exception

Throws:

java.lang.Exception

getChildTrustStore

public byte[] getChildTrustStore(java.lang.String password)
                          throws java.security.GeneralSecurityException,
                                 java.io.IOException

Throws:

java.security.GeneralSecurityException

java.io.IOException

generateKeyStorePassword

public java.lang.String generateKeyStorePassword()

createSSLContext

public javax.net.ssl.SSLContext createSSLContext(org.apache.hadoop.yarn.api.records.ApplicationId appId)
                                          throws java.security.GeneralSecurityException

Throws:

java.security.GeneralSecurityException

getHostnameVerifier

public javax.net.ssl.HostnameVerifier getHostnameVerifier()

getCaCert

@VisibleForTesting
public java.security.cert.X509Certificate getCaCert()

getCaKeyPair

@VisibleForTesting
public java.security.KeyPair getCaKeyPair()