You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zookeeper.apache.org by "Ron Dagostino (Jira)" <ji...@apache.org> on 2020/01/10 17:35:00 UTC
[jira] [Created] (ZOOKEEPER-3689) zkCli/ZooKeeperMain relies on
system properties for TLS config
Ron Dagostino created ZOOKEEPER-3689:
----------------------------------------
Summary: zkCli/ZooKeeperMain relies on system properties for TLS config
Key: ZOOKEEPER-3689
URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3689
Project: ZooKeeper
Issue Type: Bug
Components: security, server
Affects Versions: 3.5.6, 3.5.5, 3.6.0
Reporter: Ron Dagostino
The command line client to ZooKeeper (org.apache.zookeeper.ZooKeeperMain, invoked via bin/zkCli.{bat,sh}) has no facility for accepting TLS client configuration (e.g. keystore/truststore location and password) except via system properties. System properties must be passed on the command line as "-D" arguments and are inherently not secure. There should be a way to pass the client TLS configuration to org.apache.zookeeper.ZooKeeperMain in a more secure way (e.g. via a file).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)