You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/09/02 17:22:55 UTC

[GitHub] [pulsar] yuweisung opened a new issue, #17442: [Bug] Zookeeper TLS breaks /bin/pulsar zookeeper-shell

yuweisung opened a new issue, #17442:
URL: https://github.com/apache/pulsar/issues/17442

   ### Search before asking
   
   - [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.
   
   
   ### Version
   
   2.9 and 2.10
   
   ### Minimal reproduce step
   
   When turning zookeeper TLS on, NIO doesn't support TLS, and the "pulsar zookeeper-shell" script throws "not an SSL/TLS record" exception, and zk server log reports "io.netty.handler.codec.DecoderException: NotSslRecordException.
   
   
   
   
   
   ### What did you expect to see?
   
    "pulsar zookeeper-shell -server zk:2281 --run-once "ls /"" 
    should return without exception.
   
   ### What did you see instead?
   
    "pulsar zookeeper-shell -server zk:2281 --run-once "ls /"" script throws "not an SSL/TLS record" exception, and zk server log reports "io.netty.handler.codec.DecoderException: NotSslRecordException.
   
   ### Anything else?
   
   According to zookeeper guide, when turning on secured zk, client will need to use Netty context to communicate with zk server because the default context NIO doesn't support TLS/SSL. 
   
   exec $JAVA $OPTS -Dzookeeper.clientCnxnSocket="org.apache.zookeeper.ClientCnxnSocketNetty" -Dzookeeper.client.secure=true org.apache.zookeeper.ZooKeeperMain $@
   
   ### Are you willing to submit a PR?
   
   - [X] I'm willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] tisonkun commented on issue #17442: [Bug] Zookeeper TLS breaks /bin/pulsar zookeeper-shell

Posted by GitBox <gi...@apache.org>.
tisonkun commented on issue #17442:
URL: https://github.com/apache/pulsar/issues/17442#issuecomment-1235996559

   @yuweisung please format the output and share your full setup for minimal reproduction:
   
   1. What's the ZK config exactly?
   2. What's the concrete steps to reproduce the issue?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] tisonkun closed issue #17442: [Bug] Zookeeper TLS breaks /bin/pulsar zookeeper-shell

Posted by GitBox <gi...@apache.org>.
tisonkun closed issue #17442: [Bug]  Zookeeper TLS breaks /bin/pulsar zookeeper-shell 
URL: https://github.com/apache/pulsar/issues/17442


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] tisonkun commented on issue #17442: [Bug] Zookeeper TLS breaks /bin/pulsar zookeeper-shell

Posted by GitBox <gi...@apache.org>.
tisonkun commented on issue #17442:
URL: https://github.com/apache/pulsar/issues/17442#issuecomment-1317904534

   Closed as no response.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar] tisonkun commented on issue #17442: [Bug] Zookeeper TLS breaks /bin/pulsar zookeeper-shell

Posted by GitBox <gi...@apache.org>.
tisonkun commented on issue #17442:
URL: https://github.com/apache/pulsar/issues/17442#issuecomment-1236000110

   And basically, I think you can use the `client-configuration` option to force the connection using Netty impl.
   
   Reference: https://zookeeper.apache.org/doc/r3.7.0/zookeeperCLI.html (search `client-configuration`)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org