[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14305398#comment-14305398
 ] 

Flavio Junqueira commented on ZOOKEEPER-2094:
---------------------------------------------

A couple of additional things about the patch:

# The server complains that clientPort isn't set when I turn secure cnxns on. 
It should spit out a better message, like "secure client port is 2182" or 
similar
# With this patch the CLI script we distribute won't connect straight away to 
an SSL-enabled server, and it would be nice to be able to enable secure 
connections with the zkCli.sh script  
# We need to decide where to put the sample jks and cert files, perhaps they 
should be under conf? I'm also ok with creating a new folder under the project 
root, like auth or data/auth
 

> SSL feature on Netty
> --------------------
>
>                 Key: ZOOKEEPER-2094
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2094
>             Project: ZooKeeper
>          Issue Type: Sub-task
>          Components: server
>    Affects Versions: 3.4.6, 3.5.0
>            Reporter: Ian Dimayuga
>            Assignee: Ian Dimayuga
>             Fix For: 3.5.1, 3.6.0
>
>         Attachments: ZOOKEEPER-2094.patch, ZOOKEEPER-2094.patch, 
> ZOOKEEPER-2094.patch, ZOOKEEPER-2094.patch, ZOOKEEPER-2094.patch, 
> ZOOKEEPER-2094.patch, test.cert, testKeyStore.jks, testTrustStore.jks, 
> testUntrustedKeyStore.jks
>
>
> Add SSL handler to Netty pipeline, and a default X509AuthenticationProvider 
> to perform authentication.
> Review board: https://reviews.apache.org/r/30576/diff/#



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to