Enabling SSL Security for HttpFS

To enable SSL security for HttpFS, you need to use ssl_keystore and ssl_truststore, which are generated automatically for a secure cluster in /opt/mapr/conf/. When using SSL on insecure clusters, you need to manually generate keystore and truststore.

For MEP-7.1.x, follow the steps below:

Change the value inside property httpfs.ssl.enabled in file /opt/mapr/httpfs/httpfs-1.0/etc/hadoop/httpfs-site.xml to true.

Restart the HttpFS server using the following command:

maprcli node services -action restart -name httpfs -nodes <node>

For MEP-7.0.x, follow the steps below:

To preserve the original version, rename the existing server.xml file (/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml) to server.xml.orig.
```
sudo cp /opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml 
/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml.orig
```

Replace the contents of server.xml with the contents of server.xml.https.

sudo cp /opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml.https 
/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml

To enable SSL without certificate-based authentication, set the clientAuth attribute to "false" and set properties related to keystore and truststore (on a secure cluster, the defaults are already set properly) in server.xml (/opt/mapr/httpfs/httpfs-1.0/share/hadoop/httpfs/tomcat/conf/server.xml).
For example:
```
<Connector port="" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="/opt/mapr/conf/ssl_keystore"
keystorePass="<ssl-keystore-password>"
truststoreFile="/opt/mapr/conf/ssl_truststore"
truststorePass="<ssl-keystore-password>"/>
```