You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@zookeeper.apache.org by Christian Smith <sm...@gmail.com> on 2013/11/25 04:59:54 UTC

Fwd: Netty & SSL

I tried this on the user list but no luck :-(  Even a 'No, it doesn't work'
would be a help ;-)

Thanks,
Christian

---------- Forwarded message ----------
From: Christian Smith <sm...@gmail.com>
Date: 21 November 2013 08:15
Subject: Netty & SSL
To: user@zookeeper.apache.org

Hi,

I'm trying to secure my client-server comms with SSL.  I've done a lot of
search and can't find any information on enabling it, is there a guide
anywhere?

I haven't used Netty before, but I had a look at the ZK code and I can't
see any references to SSLEngine, SslHandler etc so I'm wondering if SSL
support is actually implemented, or just on the roadmap?

Any pointers would be greatly appreciated!

Thanks in advance,
Christian

Re: Netty & SSL

Posted by Christian Smith <sm...@gmail.com>.

Thanks for confirming Thawan, appreciated.  I'll have a look at
implementing the required SSL changes for netty as this would reduce the
deployment complexity.

Cheers,
Christian


On 28 November 2013 14:19, Thawan Kooburat <th...@fb.com> wrote:

> In short no, unless you fill in the missing pieces.
>
>
> There is a parameter on the server-side that allow you to switch on Netty
> network stack (default is NIO). I think some of the network-related
> mechanisms are stack-dependent so Netty may not have all the
> functionality.
>
> The client-side has a similar template, but I think no one has actually
> implemented the netty integration yet.
>
> See https://issues.apache.org/jira/browse/ZOOKEEPER-733
>
> --
> Thawan Kooburat
>
>
>
>
>
> On 11/24/13 7:59 PM, "Christian Smith" <sm...@gmail.com> wrote:
>
> >I tried this on the user list but no luck :-(  Even a 'No, it doesn't
> >work'
> >would be a help ;-)
> >
> >Thanks,
> >Christian
> >
> >---------- Forwarded message ----------
> >From: Christian Smith <sm...@gmail.com>
> >Date: 21 November 2013 08:15
> >Subject: Netty & SSL
> >To: user@zookeeper.apache.org
> >
> >
> >Hi,
> >
> >I'm trying to secure my client-server comms with SSL.  I've done a lot of
> >search and can't find any information on enabling it, is there a guide
> >anywhere?
> >
> >I haven't used Netty before, but I had a look at the ZK code and I can't
> >see any references to SSLEngine, SslHandler etc so I'm wondering if SSL
> >support is actually implemented, or just on the roadmap?
> >
> >Any pointers would be greatly appreciated!
> >
> >Thanks in advance,
> >Christian
>
>

Re: Netty & SSL

Posted by Thawan Kooburat <th...@fb.com>.

In short no, unless you fill in the missing pieces.

There is a parameter on the server-side that allow you to switch on Netty
network stack (default is NIO). I think some of the network-related
mechanisms are stack-dependent so Netty may not have all the
functionality. 

The client-side has a similar template, but I think no one has actually
implemented the netty integration yet.

See https://issues.apache.org/jira/browse/ZOOKEEPER-733

-- 
Thawan Kooburat

On 11/24/13 7:59 PM, "Christian Smith" <sm...@gmail.com> wrote:

>I tried this on the user list but no luck :-(  Even a 'No, it doesn't
>work'
>would be a help ;-)
>
>Thanks,
>Christian
>
>---------- Forwarded message ----------
>From: Christian Smith <sm...@gmail.com>
>Date: 21 November 2013 08:15
>Subject: Netty & SSL
>To: user@zookeeper.apache.org
>
>
>Hi,
>
>I'm trying to secure my client-server comms with SSL.  I've done a lot of
>search and can't find any information on enabling it, is there a guide
>anywhere?
>
>I haven't used Netty before, but I had a look at the ZK code and I can't
>see any references to SSLEngine, SslHandler etc so I'm wondering if SSL
>support is actually implemented, or just on the roadmap?
>
>Any pointers would be greatly appreciated!
>
>Thanks in advance,
>Christian