Skip to content

docs: Document how to turn off quorum hostname verification #818

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 9 commits into from
Closed

docs: Document how to turn off quorum hostname verification #818

Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
a342b09
docs: Document how to turn off quorum hostname verification
sbernauer May 23, 2024
dbfeca6
wording
sbernauer May 23, 2024
34b83d2
typo
sbernauer May 23, 2024
bf3dd18
Update docs/modules/zookeeper/pages/usage_guide/configuration_environ…
sbernauer May 23, 2024
74b5381
Move the new Troubleshooting guide
sbernauer May 23, 2024
3406406
wording
sbernauer May 23, 2024
1cb4256
fix nav
sbernauer May 23, 2024
ac89dbf
typo
sbernauer May 23, 2024
ff33759
wording in warning
sbernauer Jun 3, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions docs/modules/zookeeper/pages/usage_guide/configuration_environment_overrides.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,23 @@ servers:
replicas: 1
----

==== Turn off quorum hostname verification

In the past we have noticed problems with mutual TLS in quorums, notably with the hostname verification.
We reported the problems upstream in https://issues.apache.org/jira/browse/ZOOKEEPER-4790[ZOOKEEPER-4790].

A workaround - until the problem is fixed - is to turn of hostname verification for the quorum.

WARNING: This imposes a security risk, so we don't disable the check default.

[source,yaml]
----
servers:
configOverrides:
zoo.cfg:
ssl.quorum.hostnameVerification: "false"
----

All property values must be strings.

For a full list of configuration options we refer to the Apache ZooKeeper https://zookeeper.apache.org/doc/r3.9.2/zookeeperAdmin.html#sc_configuration[Configuration Reference].
Expand Down
Loading