Skip to content

Commit a342b09

Browse files
committed
docs: Document how to turn off quorum hostname verification
1 parent 5c022c8 commit a342b09

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

docs/modules/zookeeper/pages/usage_guide/configuration_environment_overrides.adoc

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,23 @@ servers:
3737
replicas: 1
3838
----
3939

40+
==== Turn off quorum hostname verification
41+
42+
In the past we have noticed problems with mutual TLS in quorums, notably with the hostname verification.
43+
We reported the problems upstream in https://issues.apache.org/jira/browse/ZOOKEEPER-4790[ZOOKEEPER-4790].
44+
45+
A workaround - until the problem is fixed - is to turn of hostname verification for the quorum.
46+
47+
WARNING: This imposes a security risk, so we don't disable the check default.
48+
49+
[source,yaml]
50+
----
51+
servers:
52+
configOverrides:
53+
zoo.cfg:
54+
ssl.quorum.hostnameVerification: "false"
55+
----
56+
4057
All property values must be strings.
4158

4259
For a full list of configuration options we refer to the Apache ZooKeeper https://zookeeper.apache.org/doc/r3.9.2/zookeeperAdmin.html#sc_configuration[Configuration Reference].

0 commit comments

Comments
 (0)