Zookeeper C Client and using TLS/SSL

[Dipti Mulay <di...@4skylabs.com>]

Hello All,

I am working with the Zookeeper C client for my application and need a TLS
connection to Zookeeper server.

As I look at zookeeper_init_ssl(), the second parameter it takes is the
client certificate. Initially, I thought I just had to pass the path to my
pem file. But that does not seem to be the case. Looking at code it
requires the file a "," separated buffer. I am sorry if this question is
naive : but is there a guideline on how to convert a PEM file to this
format. Do I need to use some OPENSSL concepts like BIO to do this
correctly?

Thanks for your help
-Dipti

Re: Zookeeper C Client and using TLS/SSL

[Dipti Mulay <di...@4skylabs.com>]

Hello All,
My bad… , I figured it out. The parameter *cert is a comma separated list of paths that is to be passed. Should have the following order:

  *   CA File Name, with complete PATH
  *   Certificate File Name (PEM), with complete PATH
  *   Private Key File Name, with complete PATH
  *   Optional: Password to key store

Apologies for the trouble.

Thanks
-Dipti

From: Dipti Mulay <di...@4skylabs.com>
Date: Tuesday, November 3, 2020 at 4:55 AM
To: "user@zookeeper.apache.org" <us...@zookeeper.apache.org>
Subject: Zookeeper C Client and using TLS/SSL

Hello All,

I am working with the Zookeeper C client for my application and need a TLS connection to Zookeeper server.

As I look at zookeeper_init_ssl(), the second parameter it takes is the client certificate. Initially, I thought I just had to pass the path to my pem file. But that does not seem to be the case. Looking at code it requires the file a "," separated buffer. I am sorry if this question is naive : but is there a guideline on how to convert a PEM file to this format. Do I need to use some OPENSSL concepts like BIO to do this correctly?

Thanks for your help
-Dipti