[
https://issues.apache.org/jira/browse/ZOOKEEPER-3160?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16752449#comment-16752449
]
Hudson commented on ZOOKEEPER-3160:
-----------------------------------
SUCCESS: Integrated in Jenkins build Zookeeper-trunk-single-thread #205 (See
[https://builds.apache.org/job/Zookeeper-trunk-single-thread/205/])
ZOOKEEPER-3160: Custom User SSLContext (andor: rev
045833b795a7041607337b192fa3dbcf2cc3f291)
* (edit)
zookeeper-server/src/test/java/org/apache/zookeeper/common/X509UtilTest.java
* (edit)
zookeeper-server/src/main/java/org/apache/zookeeper/common/X509Util.java
* (edit)
zookeeper-server/src/main/java/org/apache/zookeeper/common/ZKConfig.java
> Custom User SSLContext
> ----------------------
>
> Key: ZOOKEEPER-3160
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-3160
> Project: ZooKeeper
> Issue Type: New Feature
> Components: java client
> Affects Versions: 3.5.4
> Reporter: Alex Rankin
> Priority: Minor
> Labels: features, pull-request-available, ready-to-commit
> Fix For: 3.6.0
>
> Time Spent: 13.5h
> Remaining Estimate: 0h
>
> The Zookeeper libraries currently allow you to set up your SSL Context via
> system properties such as "zookeeper.ssl.keyStore.location" in the X509Util.
> This covers most simple use cases, where users have software keystores on
> their harddrive.
> There are, however, a few additional scenarios that this doesn't cover. Two
> possible ones would be:
> # The user has a hardware keystore, loaded in using PKCS11 or something
> similar.
> # The user has no access to the software keystore, but can retrieve an
> already-constructed SSLContext from their container.
> For this, I would propose that the X509Util be extended to allow a user to
> set a property such as "zookeeper.ssl.client.context" to provide a class
> which supplies a custom SSL context. This gives a lot more flexibility to the
> ZK client, and allows the user to construct the SSLContext in whatever way
> they please (which also future proofs the implementation somewhat).
> I've already completed this feature, and will put in a PR soon for it.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
