[jira] [Created] (HADOOP-14317) KMSWebServer$deprecateEnv may leak secret

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[jira] [Created] (HADOOP-14317) KMSWebServer$deprecateEnv may leak secret

JIRA jira@apache.org
John Zhuge created HADOOP-14317:

             Summary: KMSWebServer$deprecateEnv may leak secret
                 Key: HADOOP-14317
                 URL: https://issues.apache.org/jira/browse/HADOOP-14317
             Project: Hadoop Common
          Issue Type: Bug
          Components: kms, security
    Affects Versions: 3.0.0-alpha2
            Reporter: John Zhuge
            Assignee: John Zhuge

May print secret in warning message:
    LOG.warn("Environment variable {} = '{}' is deprecated and overriding"
            + " property {} = '{}', please set the property in {} instead.",
        varName, value, propName, propValue, confFile);

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]