Enrico, 

Yes, we would like client- and server-side SSL/TLS. 

I thought to do so I would need to keep the following in the config: 
secureClientPort=2281
sslQuorum=true
portUnification=false
ssl.client.enable=true
clientCnxnSocket=org.apache.zookeeper.ClientCnxnSocketNetty
serverCnxnFactory=org.apache.zookeeper.server.NettyServerCnxnFactory
ssl.quorum.trustStore.location=
ssl.quorum.trustStore.password=
ssl.quorum.keyStore.location=
ssl.quorum.keyStore.password=

When I try starting the quorum like this then it does not start up and gives
the bind error for the ports. When I try by enabling portUnification and
disabling sslQuorum, then it starts up. 

What configuration do I need to have only TLS client and server side
connections? Do you mean to do something different than what I am trying in
zoo.cfg currently? 



--
Sent from: http://zookeeper-user.578899.n2.nabble.com/

Reply via email to