[ZOOKEEPER-4491] Adding SSL support to Zktreeutil

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.0, 3.7.0
• Fix Version/s: 3.9.0
• Component/s: contrib
• Assignee: Unassigned
• Reporter: Manu Mathew
• Created: 11/Mar/22 16:05
• Updated: 04/Aug/23 11:28
• Resolved: 04/May/22 14:50

Description

Currently, zktreeutil can not talk to TLS enabled zookeeper server on secureClientPort.

If the server doesn't have non secure port, then zktreeutil will not be able to dump/fetch any data.

root@a220-0054a:~# zktreeutil --zookeeper=172.25.12.77:2188 --dump > tmp.log
2022-02-08 17:30:46,126:31303(0x7f259e895700):ZOO_INFO@prime_connection@2142: Priming connection to [172.25.12.77:2188]: last_zxid=0x0
2022-02-08 17:30:46,126:31303(0x7f259e895700):ZOO_INFO@check_events@2777: initiated connection to server 172.25.12.77:2188
2022-02-08 17:30:46,129:31303(0x7f259e895700):ZOO_ERROR@handle_socket_error_msg@2796: Socket 172.25.12.77:2188 zk retcode=-4, errno=112(Host is down): failed while receiving a server response
2022-02-08 17:30:46,129:31303(0x7f259e895700):ZOO_DEBUG@cleanup@1871: Previous connection=172.25.12.77:2188 delay=0
2022-02-08 17:30:46,129:31303(0x7f259e895700):ZOO_DEBUG@get_next_server_in_reconfig@1419: [OLD] count=0 capacity=0 next=0 hasnext=0
2022-02-08 17:30:46,129:31303(0x7f259e895700):ZOO_DEBUG@get_next_server_in_reconfig@1422: [NEW] count=1 capacity=16 next=1 hasnext=0
2022-02-08 17:30:46,129:31303(0x7f259e895700):ZOO_DEBUG@get_next_server_in_reconfig@1442: Failed to find either new or old
2022-02-08 17:30:46,129:31303(0x7f259e895700):ZOO_DEBUG@zookeeper_connect@2343: [zk] connect()

 

This Jira ticket is to add the SSL support to zktreeutil to talk to TLS enabled ZooKeeper server.

• Add support to accept ssl params.
• If ssl params are passed, invoke zookeeper_init_ssl method.