[jira] [Created] (HADOOP-14317) KMSWebServer$deprecateEnv may leak secret

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[jira] [Created] (HADOOP-14317) KMSWebServer$deprecateEnv may leak secret

JIRA jira@apache.org
John Zhuge created HADOOP-14317:
-----------------------------------

             Summary: KMSWebServer$deprecateEnv may leak secret
                 Key: HADOOP-14317
                 URL: https://issues.apache.org/jira/browse/HADOOP-14317
             Project: Hadoop Common
          Issue Type: Bug
          Components: kms, security
    Affects Versions: 3.0.0-alpha2
            Reporter: John Zhuge
            Assignee: John Zhuge


May print secret in warning message:
{code}
    LOG.warn("Environment variable {} = '{}' is deprecated and overriding"
            + " property {} = '{}', please set the property in {} instead.",
        varName, value, propName, propValue, confFile);
{code}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Loading...