[
https://issues.apache.org/jira/browse/ZOOKEEPER-5024?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18073159#comment-18073159
]
Dávid Paksy commented on ZOOKEEPER-5024:
----------------------------------------
Many thanks for your reviews [~meszibalu] and [~andor]! Also many thanks
[~andor] for merging!
> Allow to set TLS version and ciphers for PrometheusMetricsProvider
> ------------------------------------------------------------------
>
> Key: ZOOKEEPER-5024
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-5024
> Project: ZooKeeper
> Issue Type: Improvement
> Components: security
> Reporter: Dávid Paksy
> Assignee: Dávid Paksy
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.10.0
>
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> At the moment it is possible to force HTTPS for PrometheusMetricsProvider:
> {noformat}
> metricsProvider.className=org.apache.zookeeper.metrics.prometheus.PrometheusMetricsProvider
> #Do not set metricsProvider.httpPort
> metricsProvider.httpsPort=7000
> metricsProvider.ssl.keyStore.location=keystore.jks
> metricsProvider.ssl.keyStore.password=password
> metricsProvider.ssl.trustStore.location=keystore.jks
> metricsProvider.ssl.trustStore.password=password
> metricsProvider.ssl.need.client.auth=false
> {noformat}
> But there is no way to set the TLS version and cipher suites for
> PrometheusMetricsProvider.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
