[SOLR-7893] Document ZooKeeper SSL support

• Type: Sub-task
• Status: Reopened
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: ssl zookeeper
• Assignee: Jan Høydahl
• Reporter: Jan Høydahl
• Created: 07/Aug/15 00:38
• Updated: 13/Mar/20 13:10

Description

Once ZooKeeper supports SSL properly, Solr should start using it for all communication. See comments in https://cwiki.apache.org/confluence/display/solr/Enabling+SSL

ZooKeeper does not support encrypted communication with clients like Solr. There are several related JIRA tickets where SSL support is being planned/worked on: ZOOKEEPER-235; ZOOKEEPER-236; ZOOKEEPER-733; and ZOOKEEPER-1000.

Issue Links

• depends upon: ZOOKEEPER-2125 SSL on Netty client-server communication
• depends upon: SOLR-8346 Upgrade Zookeeper to version 3.5.5
• is blocked by: SOLR-13673 Provide X509ZkAclProvider for X509 Zookeeper Authentication and ACLs
• is related to: ZOOKEEPER-3482 SASL (Kerberos) Authentication with SSL for clients and Quorum
• relates to: SOLR-13665 Connecting to ZK on SSL port (secureClient: ClassNotDef found error)