Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@zookeeper.apache.org
Received-SPF: pass (athena.apache.org: local policy)
From: Christopher Powell <chrisp@ccbilleu.com>
To: "user@zookeeper.apache.org" <user@zookeeper.apache.org>
Subject: Zookeeper + Netty + SSL + PKI
Thread-Topic: Zookeeper + Netty + SSL + PKI
Thread-Index: Ac2rmvj3r+L2qrj3RpiheIwJwp7tWA==
Date: Tue, 16 Oct 2012 12:42:27 +0000
Message-ID: 
 <CB6A588D0918A747A31DE5230E69C827010E0626@MTSRV-EXCHMB2.malta.ccbill-hq.local>
Accept-Language: en-US
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_CB6A588D0918A747A31DE5230E69C827010E0626MTSRVEXCHMB2mal_"
MIME-Version: 1.0

--_000_CB6A588D0918A747A31DE5230E69C827010E0626MTSRVEXCHMB2mal_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi there,

I am in the process of deploying my first system based on Zookeeper and I n=
eed to have Zookeeper client-server communication properly authenticated an=
d encrypted.

As far as authentication I got ACLs working fine but in regards to encrypti=
on the only plausible technique I found was using stunnel as an SSL tunnel.

Seeing as the 3.4 version of Zookeeper now has Netty support and the docume=
ntation mentioned that Netty supports encryption and authentication out of =
the box I switched to NettyServerCnxnFactory.

However the documentation is still missing as to how to actually enable enc=
ryption and authentication.

All I found in the docs is:

TBD - how to manage encryption

TBD - how to manage certificates
Can someone please offer some insight as to how I can get this working?


Thanks in advance,
Chris

--_000_CB6A588D0918A747A31DE5230E69C827010E0626MTSRVEXCHMB2mal_--