[ZOOKEEPER-3174] Quorum TLS - support reloading trust/key store

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.0, 3.5.5
• Fix Version/s: 3.6.0, 3.5.5
• Labels: pull-request-available ssl-tls
• Assignee: Ilya Maykov
• Reporter: Ilya Maykov
• Created: 15/Oct/18 22:43
• Updated: 12/Oct/22 14:06
• Resolved: 19/Dec/18 12:49

Description

The Quorum TLS feature recently added in ZOOKEEPER-236 doesn't support reloading a trust/key store from disk when it changes. In an environment where short-lived certificates are used and are refreshed by some background daemon / cron job, this is a problem. Let's support reloading a trust/key store from disk when the file on disk changes.

Issue Links

• Is contained by: HBASE-27347 Port FileWatcher from ZK to autodetect keystore/truststore changes in TLS connections
• links to: GitHub Pull Request #680
• links to: GitHub Pull Request #680