[
https://issues.apache.org/jira/browse/ZOOKEEPER-5024?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dávid Paksy updated ZOOKEEPER-5024:
-----------------------------------
Description:
At the moment it is possible to force HTTPS for PrometheusMetricsProvider:
{noformat}
metricsProvider.className=org.apache.zookeeper.metrics.prometheus.PrometheusMetricsProvider
#Do not set metricsProvider.httpPort
metricsProvider.httpsPort=7000
metricsProvider.ssl.keyStore.location=keystore.jks
metricsProvider.ssl.keyStore.password=password
metricsProvider.ssl.trustStore.location=keystore.jks
metricsProvider.ssl.trustStore.password=password
metricsProvider.ssl.need.client.auth=false
{noformat}
But there is no way to set the TLS version and cipher suites for
PrometheusMetricsProvider.
was:
At the moment it is possible to force HTTPS for PrometheusMetricsProvider:
{noformat}
metricsProvider.className=org.apache.zookeeper.metrics.prometheus.PrometheusMetricsProvider
#Do not set metricsProvider.httpPort
metricsProvider.httpsPort=7000
metricsProvider.ssl.keyStore.location=keystore.jks
metricsProvider.ssl.keyStore.password=password
metricsProvider.ssl.trustStore.location=keystore.jks
metricsProvider.ssl.trustStore.password=password
metricsProvider.ssl.need.client.auth=false
{noformat}
But there is no way to set the TLS version and cipher suites for Prometheus
metrics server.
> Allow to set TLS version and ciphers for PrometheusMetricsProvider
> ------------------------------------------------------------------
>
> Key: ZOOKEEPER-5024
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5024
> Project: ZooKeeper
> Issue Type: Improvement
> Components: security
> Reporter: Dávid Paksy
> Assignee: Dávid Paksy
> Priority: Major
>
> At the moment it is possible to force HTTPS for PrometheusMetricsProvider:
> {noformat}
> metricsProvider.className=org.apache.zookeeper.metrics.prometheus.PrometheusMetricsProvider
> #Do not set metricsProvider.httpPort
> metricsProvider.httpsPort=7000
> metricsProvider.ssl.keyStore.location=keystore.jks
> metricsProvider.ssl.keyStore.password=password
> metricsProvider.ssl.trustStore.location=keystore.jks
> metricsProvider.ssl.trustStore.password=password
> metricsProvider.ssl.need.client.auth=false
> {noformat}
> But there is no way to set the TLS version and cipher suites for
> PrometheusMetricsProvider.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
