[jira] [Created] (ZOOKEEPER-3689) zkCli/ZooKeeperMain relies on system properties for TLS config

["Ron Dagostino (Jira)" <ji...@apache.org>]

Ron Dagostino created ZOOKEEPER-3689:
----------------------------------------

             Summary: zkCli/ZooKeeperMain relies on system properties for TLS config
                 Key: ZOOKEEPER-3689
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3689
             Project: ZooKeeper
          Issue Type: Bug
          Components: security, server
    Affects Versions: 3.5.6, 3.5.5, 3.6.0
            Reporter: Ron Dagostino


The command line client to ZooKeeper (org.apache.zookeeper.ZooKeeperMain, invoked via bin/zkCli.{bat,sh}) has no facility for accepting TLS client configuration (e.g. keystore/truststore location and password) except via system properties.  System properties must be passed on the command line as "-D" arguments and are inherently not secure.  There should be a way to pass the client TLS configuration to org.apache.zookeeper.ZooKeeperMain in a more secure way (e.g. via a file).



--
This message was sent by Atlassian Jira
(v8.3.4#803005)