Enrico, 

- Before the upgrade were you running SSL client port and SSL Quorum ?

Yes, before the upgrade the config contained clientPort and secureClientPort
and had JVM flags javax.net.debug=ssl:handshake and quorum.ssl.enabled=true
set. 

- If you enable only SSL Quorum, does it run ?

No, if I try and start with sslQuorum=true it always fails to start. 

- if you enable only client SSL port does it run ?

Do you mean only setting the secureClientPort and not the clientPort? No it
fails with exit error in the zkServer.sh, which I see there is a bug for, I
can try and update this code to not exit when clientPort is not set at all
and see. 

It does start up when sslQuorum=false and portUnification=true, but I would
like to have quorum SSL working. 

- is it the problem only when you configure both SSL Quorum and SSL secure
client port ?

Problem is whenever trying to enable ssl quorum at all. 

I tried even in a brand new cluster environment, starting fresh with this
install and face the same issues. 



--
Sent from: http://zookeeper-user.578899.n2.nabble.com/

Reply via email to