You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zookeeper.apache.org by "Ilya Maykov (JIRA)" <ji...@apache.org> on 2018/10/15 22:44:00 UTC
[jira] [Commented] (ZOOKEEPER-3174) Quorum TLS - support reloading
trust/key store
[ https://issues.apache.org/jira/browse/ZOOKEEPER-3174?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16650914#comment-16650914 ]
Ilya Maykov commented on ZOOKEEPER-3174:
----------------------------------------
I have a fix for this that's part of a larger pull request right now ([https://github.com/apache/zookeeper/pull/627),] however I will be breaking the fix out into a separate PR specifically for this issue.
> Quorum TLS - support reloading trust/key store
> ----------------------------------------------
>
> Key: ZOOKEEPER-3174
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3174
> Project: ZooKeeper
> Issue Type: Improvement
> Affects Versions: 3.6.0, 3.5.5
> Reporter: Ilya Maykov
> Priority: Major
>
> The Quorum TLS feature recently added in ZOOKEEPER-236 doesn't support reloading a trust/key store from disk when it changes. In an environment where short-lived certificates are used and are refreshed by some background daemon / cron job, this is a problem. Let's support reloading a trust/key store from disk when the file on disk changes.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)