I'm making progress.
I have this working on my 4-node test cluster. It is currently limited
to static membership and TLS 1.2. I think both of those limitations can
be overcome.
Folks should be able to start testing this now.
My next steps are:
- get CoPilot to add TLSv1.3 support
- explore whether the static membership requirement can be dropped
- do some more testing on a real cluster
- gives folks some time to review/test it themselves
- back-port the changes
This needs either OpenSSL-FFM or Tomcat Native.
Once I'm happy I'm not going to need any more Native changes (likely
once TLS 1.3 support is working) I'll add a Tomcat Native release to my
TODO list.
There are likely some rough edges given how flexible cluster
configuration can be.
I'm thinking Tomcat Native 1.2.x release in October and back-port of the
TLS support no earlier than the November releases depending on how much
time folks have had to test this.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
