Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6)

2019-05-16 Thread Gracia, Raul
Hi all, My name is Raúl Gracia and I work in the Pravega project (open-source project for data stream storage): http://pravega.io/. I'm currently working on a Pravega branch using "zookeeper-3.5.5-rc6", as we are interested on allowing Curator (4.0.1) to use a Zookeeper version with the bugfix

Re: Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6)

2019-05-16 Thread Andor Molnar
Hi Raul, Thanks for the analysis. Let me ask a few questions, because I see some things that need to be clarified first. 1. This issue is only about server-client SSL scenario (not Quorum TLS), so it's possibly a regression in 3.5. Is that correct? 2. When running all Pravega tests against an ext

RE: Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6)

2019-05-16 Thread Gracia, Raul
Original Message- From: Andor Molnar Sent: Thursday, May 16, 2019 11:18 AM To: DevZooKeeper Subject: Re: Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6) [EXTERNAL EMAIL] Hi Raul, Thanks for the analysis. Let me ask a few questions, b

Re: Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6)

2019-05-16 Thread Andor Molnar
e it easier for anyone > to reproduce the problem I'm experiencing. Moreover, I have provided > instructions in the README file on how to reproduce the issue. > > Thanks a lot, > Raúl. > > > -Original Message- > From: Andor Molnar > Sent: Thursday, M

RE: Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6)

2019-05-16 Thread Gracia, Raul
about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6) [EXTERNAL EMAIL] Hi Raul, X509AuthenticationProvider is not registered in the embedded ZK. In server logs it says: "[epollEventLoopGroup-4-1] ERROR org.apache.zookeeper.server.NettyServerCnxnFact

Re: Question about security configuration (was: Re: [VOTE] Apache ZooKeeper release 3.5.5 candidate 6)

2019-05-16 Thread Enrico Olivelli
folder), in this repo I extracted > > the piece of code from the Pravega repository that is used to start > > the Zookeeper standalone process, making it easier to configure the > > SSL properties via executable. I think that this will make it easier > > for anyone to reprodu