[ZOOKEEPER-3173] Quorum TLS - support PEM trust/key stores

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.0, 3.5.5
• Fix Version/s: 3.6.0, 3.5.5
• Labels: pull-request-available ssl-tls
• Assignee: Ilya Maykov
• Reporter: Ilya Maykov
• Created: 15/Oct/18 22:40
• Updated: 10/Nov/21 14:57
• Resolved: 07/Nov/18 01:30

Description

ZOOKEEPER-236 is landed so there is some TLS support in Zookeeper now, but only JKS trust stores are supported. JKS is not really used by non-Java software, where PKCS12 and PEM are more standard. Let's add support for PEM trust / key stores to make Quorum TLS easier to use.

Issue Links

• relates to: ZOOKEEPER-236 SSL Support for Atomic Broadcast protocol
• links to: GitHub Pull Request #678
• links to: GitHub Pull Request #678