zookeeper-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ilya Maykov (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ZOOKEEPER-3174) Quorum TLS - support reloading trust/key store
Date Mon, 15 Oct 2018 22:44:00 GMT

    [ https://issues.apache.org/jira/browse/ZOOKEEPER-3174?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16650914#comment-16650914
] 

Ilya Maykov commented on ZOOKEEPER-3174:
----------------------------------------

I have a fix for this that's part of a larger pull request right now ([https://github.com/apache/zookeeper/pull/627),] however
I will be breaking the fix out into a separate PR specifically for this issue.

> Quorum TLS - support reloading trust/key store
> ----------------------------------------------
>
>                 Key: ZOOKEEPER-3174
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3174
>             Project: ZooKeeper
>          Issue Type: Improvement
>    Affects Versions: 3.6.0, 3.5.5
>            Reporter: Ilya Maykov
>            Priority: Major
>
> The Quorum TLS feature recently added in ZOOKEEPER-236 doesn't support reloading a
trust/key store from disk when it changes. In an environment where short-lived certificates
are used and are refreshed by some background daemon / cron job, this is a problem. Let's
support reloading a trust/key store from disk when the file on disk changes.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message