Admin Server Authentication/SSL

[rammohan ganapavarapu <ra...@gmail.com>]

Hi,

Does zk AdminServer in  3.5 support authentication and SSL?

Thanks,
Ram

Re: Admin Server Authentication/SSL

[rammohan ganapavarapu <ra...@gmail.com>]

Hi,

let me re-phrase my question, Is there any way to disable non-ssl
connections for adminserver? i want admin server accept only ssl
connections.

Ram

On Tue, May 28, 2019 at 11:40 AM Martin Gainty <mg...@hotmail.com> wrote:

> for 3.5..5 since the default security protocol is TLSv1.2 :
> ssl.protocol and ssl.quorum.protocol : (Java system properties:
> zookeeper.ssl.protocol and zookeeper.ssl.quorum.protocol) New in 3.5.5:
> Specifies to protocol to be used in client and quorum TLS negotiation.
> Default: TLSv1.2
>
> any reason (other than political) why you cannot implement TLS (v1.2)
> instead of SSLv3 for 3.5.5 ?
>
> https://zookeeper.apache.org/doc/current/zookeeperAdmin.html
> ZooKeeper: Because Coordinating Distributed Systems is a Zoo - Apache
> ZooKeeper - Home<
> https://zookeeper.apache.org/doc/current/zookeeperAdmin.html>
> For any operating system not explicitly mentioned as supported in the
> matrix, components may or may not work. The ZooKeeper community will fix
> obvious bugs that are reported for other platforms, but there is no full
> support.
> zookeeper.apache.org
>
> ?
>
> ________________________________
> From: rammohan ganapavarapu <ra...@gmail.com>
> Sent: Tuesday, May 28, 2019 12:56 PM
> To: user@zookeeper.apache.org
> Subject: Admin Server Authentication/SSL
>
> Hi,
>
> Does zk AdminServer in  3.5 support authentication and SSL?
>
> Thanks,
> Ram
>

Re: Admin Server Authentication/SSL

[Martin Gainty <mg...@hotmail.com>]

for 3.5..5 since the default security protocol is TLSv1.2 :
ssl.protocol and ssl.quorum.protocol : (Java system properties: zookeeper.ssl.protocol and zookeeper.ssl.quorum.protocol) New in 3.5.5: Specifies to protocol to be used in client and quorum TLS negotiation. Default: TLSv1.2

any reason (other than political) why you cannot implement TLS (v1.2) instead of SSLv3 for 3.5.5 ?

https://zookeeper.apache.org/doc/current/zookeeperAdmin.html
ZooKeeper: Because Coordinating Distributed Systems is a Zoo - Apache ZooKeeper - Home<https://zookeeper.apache.org/doc/current/zookeeperAdmin.html>
For any operating system not explicitly mentioned as supported in the matrix, components may or may not work. The ZooKeeper community will fix obvious bugs that are reported for other platforms, but there is no full support.
zookeeper.apache.org

?

________________________________
From: rammohan ganapavarapu <ra...@gmail.com>
Sent: Tuesday, May 28, 2019 12:56 PM
To: user@zookeeper.apache.org
Subject: Admin Server Authentication/SSL

Hi,

Does zk AdminServer in  3.5 support authentication and SSL?

Thanks,
Ram