blob: ba896802606d9610a92ddf9f79ca2352dac68f0c [file] [log] [blame]
<!DOCTYPE HTML>
<html lang="en">
<head>
<!-- Generated by javadoc (17) -->
<title>Source code</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="source: package: org.apache.hadoop.hbase.regionserver, class: TestEncryptionKeyRotation">
<meta name="generator" content="javadoc/SourceToHTMLConverter">
<link rel="stylesheet" type="text/css" href="../../../../../../stylesheet.css" title="Style">
</head>
<body class="source-page">
<main role="main">
<div class="source-container">
<pre><span class="source-line-no">001</span><span id="line-1">/*</span>
<span class="source-line-no">002</span><span id="line-2"> * Licensed to the Apache Software Foundation (ASF) under one</span>
<span class="source-line-no">003</span><span id="line-3"> * or more contributor license agreements. See the NOTICE file</span>
<span class="source-line-no">004</span><span id="line-4"> * distributed with this work for additional information</span>
<span class="source-line-no">005</span><span id="line-5"> * regarding copyright ownership. The ASF licenses this file</span>
<span class="source-line-no">006</span><span id="line-6"> * to you under the Apache License, Version 2.0 (the</span>
<span class="source-line-no">007</span><span id="line-7"> * "License"); you may not use this file except in compliance</span>
<span class="source-line-no">008</span><span id="line-8"> * with the License. You may obtain a copy of the License at</span>
<span class="source-line-no">009</span><span id="line-9"> *</span>
<span class="source-line-no">010</span><span id="line-10"> * http://www.apache.org/licenses/LICENSE-2.0</span>
<span class="source-line-no">011</span><span id="line-11"> *</span>
<span class="source-line-no">012</span><span id="line-12"> * Unless required by applicable law or agreed to in writing, software</span>
<span class="source-line-no">013</span><span id="line-13"> * distributed under the License is distributed on an "AS IS" BASIS,</span>
<span class="source-line-no">014</span><span id="line-14"> * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.</span>
<span class="source-line-no">015</span><span id="line-15"> * See the License for the specific language governing permissions and</span>
<span class="source-line-no">016</span><span id="line-16"> * limitations under the License.</span>
<span class="source-line-no">017</span><span id="line-17"> */</span>
<span class="source-line-no">018</span><span id="line-18">package org.apache.hadoop.hbase.regionserver;</span>
<span class="source-line-no">019</span><span id="line-19"></span>
<span class="source-line-no">020</span><span id="line-20">import static org.junit.Assert.assertNotNull;</span>
<span class="source-line-no">021</span><span id="line-21">import static org.junit.Assert.assertTrue;</span>
<span class="source-line-no">022</span><span id="line-22"></span>
<span class="source-line-no">023</span><span id="line-23">import java.io.IOException;</span>
<span class="source-line-no">024</span><span id="line-24">import java.security.Key;</span>
<span class="source-line-no">025</span><span id="line-25">import java.util.ArrayList;</span>
<span class="source-line-no">026</span><span id="line-26">import java.util.Collection;</span>
<span class="source-line-no">027</span><span id="line-27">import java.util.List;</span>
<span class="source-line-no">028</span><span id="line-28">import javax.crypto.spec.SecretKeySpec;</span>
<span class="source-line-no">029</span><span id="line-29">import org.apache.hadoop.conf.Configuration;</span>
<span class="source-line-no">030</span><span id="line-30">import org.apache.hadoop.fs.Path;</span>
<span class="source-line-no">031</span><span id="line-31">import org.apache.hadoop.hbase.HBaseClassTestRule;</span>
<span class="source-line-no">032</span><span id="line-32">import org.apache.hadoop.hbase.HBaseTestingUtil;</span>
<span class="source-line-no">033</span><span id="line-33">import org.apache.hadoop.hbase.HConstants;</span>
<span class="source-line-no">034</span><span id="line-34">import org.apache.hadoop.hbase.TableName;</span>
<span class="source-line-no">035</span><span id="line-35">import org.apache.hadoop.hbase.Waiter;</span>
<span class="source-line-no">036</span><span id="line-36">import org.apache.hadoop.hbase.client.ColumnFamilyDescriptor;</span>
<span class="source-line-no">037</span><span id="line-37">import org.apache.hadoop.hbase.client.ColumnFamilyDescriptorBuilder;</span>
<span class="source-line-no">038</span><span id="line-38">import org.apache.hadoop.hbase.client.CompactionState;</span>
<span class="source-line-no">039</span><span id="line-39">import org.apache.hadoop.hbase.client.Put;</span>
<span class="source-line-no">040</span><span id="line-40">import org.apache.hadoop.hbase.client.Table;</span>
<span class="source-line-no">041</span><span id="line-41">import org.apache.hadoop.hbase.client.TableDescriptor;</span>
<span class="source-line-no">042</span><span id="line-42">import org.apache.hadoop.hbase.client.TableDescriptorBuilder;</span>
<span class="source-line-no">043</span><span id="line-43">import org.apache.hadoop.hbase.io.crypto.Encryption;</span>
<span class="source-line-no">044</span><span id="line-44">import org.apache.hadoop.hbase.io.crypto.KeyProviderForTesting;</span>
<span class="source-line-no">045</span><span id="line-45">import org.apache.hadoop.hbase.io.crypto.aes.AES;</span>
<span class="source-line-no">046</span><span id="line-46">import org.apache.hadoop.hbase.io.hfile.CacheConfig;</span>
<span class="source-line-no">047</span><span id="line-47">import org.apache.hadoop.hbase.io.hfile.HFile;</span>
<span class="source-line-no">048</span><span id="line-48">import org.apache.hadoop.hbase.security.EncryptionUtil;</span>
<span class="source-line-no">049</span><span id="line-49">import org.apache.hadoop.hbase.security.User;</span>
<span class="source-line-no">050</span><span id="line-50">import org.apache.hadoop.hbase.testclassification.MediumTests;</span>
<span class="source-line-no">051</span><span id="line-51">import org.apache.hadoop.hbase.testclassification.RegionServerTests;</span>
<span class="source-line-no">052</span><span id="line-52">import org.apache.hadoop.hbase.util.Bytes;</span>
<span class="source-line-no">053</span><span id="line-53">import org.junit.AfterClass;</span>
<span class="source-line-no">054</span><span id="line-54">import org.junit.BeforeClass;</span>
<span class="source-line-no">055</span><span id="line-55">import org.junit.ClassRule;</span>
<span class="source-line-no">056</span><span id="line-56">import org.junit.Rule;</span>
<span class="source-line-no">057</span><span id="line-57">import org.junit.Test;</span>
<span class="source-line-no">058</span><span id="line-58">import org.junit.experimental.categories.Category;</span>
<span class="source-line-no">059</span><span id="line-59">import org.junit.rules.TestName;</span>
<span class="source-line-no">060</span><span id="line-60"></span>
<span class="source-line-no">061</span><span id="line-61">@Category({ RegionServerTests.class, MediumTests.class })</span>
<span class="source-line-no">062</span><span id="line-62">public class TestEncryptionKeyRotation {</span>
<span class="source-line-no">063</span><span id="line-63"></span>
<span class="source-line-no">064</span><span id="line-64"> @ClassRule</span>
<span class="source-line-no">065</span><span id="line-65"> public static final HBaseClassTestRule CLASS_RULE =</span>
<span class="source-line-no">066</span><span id="line-66"> HBaseClassTestRule.forClass(TestEncryptionKeyRotation.class);</span>
<span class="source-line-no">067</span><span id="line-67"></span>
<span class="source-line-no">068</span><span id="line-68"> private static final HBaseTestingUtil TEST_UTIL = new HBaseTestingUtil();</span>
<span class="source-line-no">069</span><span id="line-69"> private static final Configuration conf = TEST_UTIL.getConfiguration();</span>
<span class="source-line-no">070</span><span id="line-70"> private static final Key initialCFKey;</span>
<span class="source-line-no">071</span><span id="line-71"> private static final Key secondCFKey;</span>
<span class="source-line-no">072</span><span id="line-72"></span>
<span class="source-line-no">073</span><span id="line-73"> @Rule</span>
<span class="source-line-no">074</span><span id="line-74"> public TestName name = new TestName();</span>
<span class="source-line-no">075</span><span id="line-75"></span>
<span class="source-line-no">076</span><span id="line-76"> static {</span>
<span class="source-line-no">077</span><span id="line-77"> // Create the test encryption keys</span>
<span class="source-line-no">078</span><span id="line-78"> byte[] keyBytes = new byte[AES.KEY_LENGTH];</span>
<span class="source-line-no">079</span><span id="line-79"> Bytes.secureRandom(keyBytes);</span>
<span class="source-line-no">080</span><span id="line-80"> String algorithm = conf.get(HConstants.CRYPTO_KEY_ALGORITHM_CONF_KEY, HConstants.CIPHER_AES);</span>
<span class="source-line-no">081</span><span id="line-81"> initialCFKey = new SecretKeySpec(keyBytes, algorithm);</span>
<span class="source-line-no">082</span><span id="line-82"> Bytes.secureRandom(keyBytes);</span>
<span class="source-line-no">083</span><span id="line-83"> secondCFKey = new SecretKeySpec(keyBytes, algorithm);</span>
<span class="source-line-no">084</span><span id="line-84"> }</span>
<span class="source-line-no">085</span><span id="line-85"></span>
<span class="source-line-no">086</span><span id="line-86"> @BeforeClass</span>
<span class="source-line-no">087</span><span id="line-87"> public static void setUp() throws Exception {</span>
<span class="source-line-no">088</span><span id="line-88"> conf.setInt("hfile.format.version", 3);</span>
<span class="source-line-no">089</span><span id="line-89"> conf.set(HConstants.CRYPTO_KEYPROVIDER_CONF_KEY, KeyProviderForTesting.class.getName());</span>
<span class="source-line-no">090</span><span id="line-90"> conf.set(HConstants.CRYPTO_MASTERKEY_NAME_CONF_KEY, "hbase");</span>
<span class="source-line-no">091</span><span id="line-91"></span>
<span class="source-line-no">092</span><span id="line-92"> // Start the minicluster</span>
<span class="source-line-no">093</span><span id="line-93"> TEST_UTIL.startMiniCluster(1);</span>
<span class="source-line-no">094</span><span id="line-94"> }</span>
<span class="source-line-no">095</span><span id="line-95"></span>
<span class="source-line-no">096</span><span id="line-96"> @AfterClass</span>
<span class="source-line-no">097</span><span id="line-97"> public static void tearDown() throws Exception {</span>
<span class="source-line-no">098</span><span id="line-98"> TEST_UTIL.shutdownMiniCluster();</span>
<span class="source-line-no">099</span><span id="line-99"> }</span>
<span class="source-line-no">100</span><span id="line-100"></span>
<span class="source-line-no">101</span><span id="line-101"> @Test</span>
<span class="source-line-no">102</span><span id="line-102"> public void testCFKeyRotation() throws Exception {</span>
<span class="source-line-no">103</span><span id="line-103"> // Create the table schema</span>
<span class="source-line-no">104</span><span id="line-104"> TableDescriptorBuilder tableDescriptorBuilder =</span>
<span class="source-line-no">105</span><span id="line-105"> TableDescriptorBuilder.newBuilder(TableName.valueOf("default", name.getMethodName()));</span>
<span class="source-line-no">106</span><span id="line-106"> ColumnFamilyDescriptorBuilder columnFamilyDescriptorBuilder =</span>
<span class="source-line-no">107</span><span id="line-107"> ColumnFamilyDescriptorBuilder.newBuilder(Bytes.toBytes("cf"));</span>
<span class="source-line-no">108</span><span id="line-108"> String algorithm = conf.get(HConstants.CRYPTO_KEY_ALGORITHM_CONF_KEY, HConstants.CIPHER_AES);</span>
<span class="source-line-no">109</span><span id="line-109"> columnFamilyDescriptorBuilder.setEncryptionType(algorithm);</span>
<span class="source-line-no">110</span><span id="line-110"> columnFamilyDescriptorBuilder</span>
<span class="source-line-no">111</span><span id="line-111"> .setEncryptionKey(EncryptionUtil.wrapKey(conf, "hbase", initialCFKey));</span>
<span class="source-line-no">112</span><span id="line-112"> tableDescriptorBuilder.setColumnFamily(columnFamilyDescriptorBuilder.build());</span>
<span class="source-line-no">113</span><span id="line-113"> TableDescriptor tableDescriptor = tableDescriptorBuilder.build();</span>
<span class="source-line-no">114</span><span id="line-114"></span>
<span class="source-line-no">115</span><span id="line-115"> // Create the table and some on disk files</span>
<span class="source-line-no">116</span><span id="line-116"> createTableAndFlush(tableDescriptor);</span>
<span class="source-line-no">117</span><span id="line-117"></span>
<span class="source-line-no">118</span><span id="line-118"> // Verify we have store file(s) with the initial key</span>
<span class="source-line-no">119</span><span id="line-119"> final List&lt;Path&gt; initialPaths = findStorefilePaths(tableDescriptor.getTableName());</span>
<span class="source-line-no">120</span><span id="line-120"> assertTrue(initialPaths.size() &gt; 0);</span>
<span class="source-line-no">121</span><span id="line-121"> for (Path path : initialPaths) {</span>
<span class="source-line-no">122</span><span id="line-122"> assertTrue("Store file " + path + " has incorrect key",</span>
<span class="source-line-no">123</span><span id="line-123"> Bytes.equals(initialCFKey.getEncoded(), extractHFileKey(path)));</span>
<span class="source-line-no">124</span><span id="line-124"> }</span>
<span class="source-line-no">125</span><span id="line-125"></span>
<span class="source-line-no">126</span><span id="line-126"> // Update the schema with a new encryption key</span>
<span class="source-line-no">127</span><span id="line-127"> columnFamilyDescriptorBuilder.setEncryptionKey(EncryptionUtil.wrapKey(conf,</span>
<span class="source-line-no">128</span><span id="line-128"> conf.get(HConstants.CRYPTO_MASTERKEY_NAME_CONF_KEY, User.getCurrent().getShortName()),</span>
<span class="source-line-no">129</span><span id="line-129"> secondCFKey));</span>
<span class="source-line-no">130</span><span id="line-130"> TEST_UTIL.getAdmin().modifyColumnFamily(tableDescriptor.getTableName(),</span>
<span class="source-line-no">131</span><span id="line-131"> columnFamilyDescriptorBuilder.build());</span>
<span class="source-line-no">132</span><span id="line-132"> Thread.sleep(5000); // Need a predicate for online schema change</span>
<span class="source-line-no">133</span><span id="line-133"></span>
<span class="source-line-no">134</span><span id="line-134"> // And major compact</span>
<span class="source-line-no">135</span><span id="line-135"> TEST_UTIL.getAdmin().majorCompact(tableDescriptor.getTableName());</span>
<span class="source-line-no">136</span><span id="line-136"> // waiting for the major compaction to complete</span>
<span class="source-line-no">137</span><span id="line-137"> TEST_UTIL.waitFor(30000, new Waiter.Predicate&lt;IOException&gt;() {</span>
<span class="source-line-no">138</span><span id="line-138"> @Override</span>
<span class="source-line-no">139</span><span id="line-139"> public boolean evaluate() throws IOException {</span>
<span class="source-line-no">140</span><span id="line-140"> return TEST_UTIL.getAdmin().getCompactionState(tableDescriptor.getTableName())</span>
<span class="source-line-no">141</span><span id="line-141"> == CompactionState.NONE;</span>
<span class="source-line-no">142</span><span id="line-142"> }</span>
<span class="source-line-no">143</span><span id="line-143"> });</span>
<span class="source-line-no">144</span><span id="line-144"> List&lt;Path&gt; pathsAfterCompaction = findStorefilePaths(tableDescriptor.getTableName());</span>
<span class="source-line-no">145</span><span id="line-145"> assertTrue(pathsAfterCompaction.size() &gt; 0);</span>
<span class="source-line-no">146</span><span id="line-146"> for (Path path : pathsAfterCompaction) {</span>
<span class="source-line-no">147</span><span id="line-147"> assertTrue("Store file " + path + " has incorrect key",</span>
<span class="source-line-no">148</span><span id="line-148"> Bytes.equals(secondCFKey.getEncoded(), extractHFileKey(path)));</span>
<span class="source-line-no">149</span><span id="line-149"> }</span>
<span class="source-line-no">150</span><span id="line-150"> List&lt;Path&gt; compactedPaths = findCompactedStorefilePaths(tableDescriptor.getTableName());</span>
<span class="source-line-no">151</span><span id="line-151"> assertTrue(compactedPaths.size() &gt; 0);</span>
<span class="source-line-no">152</span><span id="line-152"> for (Path path : compactedPaths) {</span>
<span class="source-line-no">153</span><span id="line-153"> assertTrue("Store file " + path + " retains initial key",</span>
<span class="source-line-no">154</span><span id="line-154"> Bytes.equals(initialCFKey.getEncoded(), extractHFileKey(path)));</span>
<span class="source-line-no">155</span><span id="line-155"> }</span>
<span class="source-line-no">156</span><span id="line-156"> }</span>
<span class="source-line-no">157</span><span id="line-157"></span>
<span class="source-line-no">158</span><span id="line-158"> @Test</span>
<span class="source-line-no">159</span><span id="line-159"> public void testMasterKeyRotation() throws Exception {</span>
<span class="source-line-no">160</span><span id="line-160"> // Create the table schema</span>
<span class="source-line-no">161</span><span id="line-161"> TableDescriptorBuilder tableDescriptorBuilder =</span>
<span class="source-line-no">162</span><span id="line-162"> TableDescriptorBuilder.newBuilder(TableName.valueOf("default", name.getMethodName()));</span>
<span class="source-line-no">163</span><span id="line-163"> ColumnFamilyDescriptorBuilder columnFamilyDescriptorBuilder =</span>
<span class="source-line-no">164</span><span id="line-164"> ColumnFamilyDescriptorBuilder.newBuilder(Bytes.toBytes("cf"));</span>
<span class="source-line-no">165</span><span id="line-165"> String algorithm = conf.get(HConstants.CRYPTO_KEY_ALGORITHM_CONF_KEY, HConstants.CIPHER_AES);</span>
<span class="source-line-no">166</span><span id="line-166"> columnFamilyDescriptorBuilder.setEncryptionType(algorithm);</span>
<span class="source-line-no">167</span><span id="line-167"> columnFamilyDescriptorBuilder</span>
<span class="source-line-no">168</span><span id="line-168"> .setEncryptionKey(EncryptionUtil.wrapKey(conf, "hbase", initialCFKey));</span>
<span class="source-line-no">169</span><span id="line-169"> tableDescriptorBuilder.setColumnFamily(columnFamilyDescriptorBuilder.build());</span>
<span class="source-line-no">170</span><span id="line-170"> TableDescriptor tableDescriptor = tableDescriptorBuilder.build();</span>
<span class="source-line-no">171</span><span id="line-171"></span>
<span class="source-line-no">172</span><span id="line-172"> // Create the table and some on disk files</span>
<span class="source-line-no">173</span><span id="line-173"> createTableAndFlush(tableDescriptor);</span>
<span class="source-line-no">174</span><span id="line-174"></span>
<span class="source-line-no">175</span><span id="line-175"> // Verify we have store file(s) with the initial key</span>
<span class="source-line-no">176</span><span id="line-176"> List&lt;Path&gt; storeFilePaths = findStorefilePaths(tableDescriptor.getTableName());</span>
<span class="source-line-no">177</span><span id="line-177"> assertTrue(storeFilePaths.size() &gt; 0);</span>
<span class="source-line-no">178</span><span id="line-178"> for (Path path : storeFilePaths) {</span>
<span class="source-line-no">179</span><span id="line-179"> assertTrue("Store file " + path + " has incorrect key",</span>
<span class="source-line-no">180</span><span id="line-180"> Bytes.equals(initialCFKey.getEncoded(), extractHFileKey(path)));</span>
<span class="source-line-no">181</span><span id="line-181"> }</span>
<span class="source-line-no">182</span><span id="line-182"></span>
<span class="source-line-no">183</span><span id="line-183"> // Now shut down the HBase cluster</span>
<span class="source-line-no">184</span><span id="line-184"> TEST_UTIL.shutdownMiniHBaseCluster();</span>
<span class="source-line-no">185</span><span id="line-185"></span>
<span class="source-line-no">186</span><span id="line-186"> // "Rotate" the master key</span>
<span class="source-line-no">187</span><span id="line-187"> conf.set(HConstants.CRYPTO_MASTERKEY_NAME_CONF_KEY, "other");</span>
<span class="source-line-no">188</span><span id="line-188"> conf.set(HConstants.CRYPTO_MASTERKEY_ALTERNATE_NAME_CONF_KEY, "hbase");</span>
<span class="source-line-no">189</span><span id="line-189"></span>
<span class="source-line-no">190</span><span id="line-190"> // Start the cluster back up</span>
<span class="source-line-no">191</span><span id="line-191"> TEST_UTIL.startMiniHBaseCluster();</span>
<span class="source-line-no">192</span><span id="line-192"> // Verify the table can still be loaded</span>
<span class="source-line-no">193</span><span id="line-193"> TEST_UTIL.waitTableAvailable(tableDescriptor.getTableName(), 5000);</span>
<span class="source-line-no">194</span><span id="line-194"> // Double check that the store file keys can be unwrapped</span>
<span class="source-line-no">195</span><span id="line-195"> storeFilePaths = findStorefilePaths(tableDescriptor.getTableName());</span>
<span class="source-line-no">196</span><span id="line-196"> assertTrue(storeFilePaths.size() &gt; 0);</span>
<span class="source-line-no">197</span><span id="line-197"> for (Path path : storeFilePaths) {</span>
<span class="source-line-no">198</span><span id="line-198"> assertTrue("Store file " + path + " has incorrect key",</span>
<span class="source-line-no">199</span><span id="line-199"> Bytes.equals(initialCFKey.getEncoded(), extractHFileKey(path)));</span>
<span class="source-line-no">200</span><span id="line-200"> }</span>
<span class="source-line-no">201</span><span id="line-201"> }</span>
<span class="source-line-no">202</span><span id="line-202"></span>
<span class="source-line-no">203</span><span id="line-203"> private static List&lt;Path&gt; findStorefilePaths(TableName tableName) throws Exception {</span>
<span class="source-line-no">204</span><span id="line-204"> List&lt;Path&gt; paths = new ArrayList&lt;&gt;();</span>
<span class="source-line-no">205</span><span id="line-205"> for (Region region : TEST_UTIL.getRSForFirstRegionInTable(tableName).getRegions(tableName)) {</span>
<span class="source-line-no">206</span><span id="line-206"> for (HStore store : ((HRegion) region).getStores()) {</span>
<span class="source-line-no">207</span><span id="line-207"> for (HStoreFile storefile : store.getStorefiles()) {</span>
<span class="source-line-no">208</span><span id="line-208"> paths.add(storefile.getPath());</span>
<span class="source-line-no">209</span><span id="line-209"> }</span>
<span class="source-line-no">210</span><span id="line-210"> }</span>
<span class="source-line-no">211</span><span id="line-211"> }</span>
<span class="source-line-no">212</span><span id="line-212"> return paths;</span>
<span class="source-line-no">213</span><span id="line-213"> }</span>
<span class="source-line-no">214</span><span id="line-214"></span>
<span class="source-line-no">215</span><span id="line-215"> private static List&lt;Path&gt; findCompactedStorefilePaths(TableName tableName) throws Exception {</span>
<span class="source-line-no">216</span><span id="line-216"> List&lt;Path&gt; paths = new ArrayList&lt;&gt;();</span>
<span class="source-line-no">217</span><span id="line-217"> for (Region region : TEST_UTIL.getRSForFirstRegionInTable(tableName).getRegions(tableName)) {</span>
<span class="source-line-no">218</span><span id="line-218"> for (HStore store : ((HRegion) region).getStores()) {</span>
<span class="source-line-no">219</span><span id="line-219"> Collection&lt;HStoreFile&gt; compactedfiles =</span>
<span class="source-line-no">220</span><span id="line-220"> store.getStoreEngine().getStoreFileManager().getCompactedfiles();</span>
<span class="source-line-no">221</span><span id="line-221"> if (compactedfiles != null) {</span>
<span class="source-line-no">222</span><span id="line-222"> for (HStoreFile storefile : compactedfiles) {</span>
<span class="source-line-no">223</span><span id="line-223"> paths.add(storefile.getPath());</span>
<span class="source-line-no">224</span><span id="line-224"> }</span>
<span class="source-line-no">225</span><span id="line-225"> }</span>
<span class="source-line-no">226</span><span id="line-226"> }</span>
<span class="source-line-no">227</span><span id="line-227"> }</span>
<span class="source-line-no">228</span><span id="line-228"> return paths;</span>
<span class="source-line-no">229</span><span id="line-229"> }</span>
<span class="source-line-no">230</span><span id="line-230"></span>
<span class="source-line-no">231</span><span id="line-231"> private void createTableAndFlush(TableDescriptor tableDescriptor) throws Exception {</span>
<span class="source-line-no">232</span><span id="line-232"> ColumnFamilyDescriptor cfd = tableDescriptor.getColumnFamilies()[0];</span>
<span class="source-line-no">233</span><span id="line-233"> // Create the test table</span>
<span class="source-line-no">234</span><span id="line-234"> TEST_UTIL.getAdmin().createTable(tableDescriptor);</span>
<span class="source-line-no">235</span><span id="line-235"> TEST_UTIL.waitTableAvailable(tableDescriptor.getTableName(), 5000);</span>
<span class="source-line-no">236</span><span id="line-236"> // Create a store file</span>
<span class="source-line-no">237</span><span id="line-237"> Table table = TEST_UTIL.getConnection().getTable(tableDescriptor.getTableName());</span>
<span class="source-line-no">238</span><span id="line-238"> try {</span>
<span class="source-line-no">239</span><span id="line-239"> table.put(new Put(Bytes.toBytes("testrow")).addColumn(cfd.getName(), Bytes.toBytes("q"),</span>
<span class="source-line-no">240</span><span id="line-240"> Bytes.toBytes("value")));</span>
<span class="source-line-no">241</span><span id="line-241"> } finally {</span>
<span class="source-line-no">242</span><span id="line-242"> table.close();</span>
<span class="source-line-no">243</span><span id="line-243"> }</span>
<span class="source-line-no">244</span><span id="line-244"> TEST_UTIL.getAdmin().flush(tableDescriptor.getTableName());</span>
<span class="source-line-no">245</span><span id="line-245"> }</span>
<span class="source-line-no">246</span><span id="line-246"></span>
<span class="source-line-no">247</span><span id="line-247"> private static byte[] extractHFileKey(Path path) throws Exception {</span>
<span class="source-line-no">248</span><span id="line-248"> HFile.Reader reader =</span>
<span class="source-line-no">249</span><span id="line-249"> HFile.createReader(TEST_UTIL.getTestFileSystem(), path, new CacheConfig(conf), true, conf);</span>
<span class="source-line-no">250</span><span id="line-250"> try {</span>
<span class="source-line-no">251</span><span id="line-251"> Encryption.Context cryptoContext = reader.getFileContext().getEncryptionContext();</span>
<span class="source-line-no">252</span><span id="line-252"> assertNotNull("Reader has a null crypto context", cryptoContext);</span>
<span class="source-line-no">253</span><span id="line-253"> Key key = cryptoContext.getKey();</span>
<span class="source-line-no">254</span><span id="line-254"> assertNotNull("Crypto context has no key", key);</span>
<span class="source-line-no">255</span><span id="line-255"> return key.getEncoded();</span>
<span class="source-line-no">256</span><span id="line-256"> } finally {</span>
<span class="source-line-no">257</span><span id="line-257"> reader.close();</span>
<span class="source-line-no">258</span><span id="line-258"> }</span>
<span class="source-line-no">259</span><span id="line-259"> }</span>
<span class="source-line-no">260</span><span id="line-260"></span>
<span class="source-line-no">261</span><span id="line-261">}</span>
</pre>
</div>
</main>
</body>
</html>