Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Replace upstream "FIPS mode" with more fine-grained TLS hostname verification options #829

Open
nightkr opened this issue Jun 26, 2024 · 1 comment
Open

Replace upstream "FIPS mode" with more fine-grained TLS hostname verification options #829

nightkr opened this issue Jun 26, 2024 · 1 comment

Comments

@nightkr
Copy link
Member

nightkr commented Jun 26, 2024

#760 was closed now that FIPS mode is on by default, disabling all ZK-specific TLS verification. That's a pretty blunt tool, so we opened apache/zookeeper#2173 to add a more fine-grained option to control what we need. If that is merged then we should integrate it on our end.
@nightkr nightkr mentioned this issue Jun 26, 2024
Closed
@nightkr
Copy link
Member Author

nightkr commented Nov 27, 2024

apache/zookeeper#2173 has now been merged, and will be part of 3.9.4.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@nightkr