[ZOOKEEPER-4396] Read Key/trust store password from file

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.8.0
• Fix Version/s: 3.8.0
• Component/s: security
• Labels: pull-request-available
• Assignee: Unassigned
• Reporter: Li Wang
• Created: 13/Oct/21 00:16
• Updated: 28/Jan/22 08:31
• Resolved: 28/Jan/22 08:28

Description

Key/trust store password is currently specified as plain text via system property or config property. To avoid exposing passwords as plain text and reduce security vulnerability, it would be great if zookeeper can read the password from a file that is protected with restricted permissions.

Issue Links

• is related to: ZOOKEEPER-4458 Implement 'openssl' style for supporting different providers of key/trust store password
• links to: GitHub Pull Request #1773