zookeeper-operator icon indicating copy to clipboard operation
zookeeper-operator copied to clipboard
verified publisher icon stackabletech

Replace upstream "FIPS mode" with more fine-grained TLS hostname verification options

Open nightkr opened this issue 1 year ago • 1 comments

https://github.com/stackabletech/zookeeper-operator/issues/760 was closed now that FIPS mode is on by default, disabling all ZK-specific TLS verification. That's a pretty blunt tool, so we opened https://github.com/apache/zookeeper/pull/2173 to add a more fine-grained option to control what we need. If that is merged then we should integrate it on our end.

nightkr avatar Jun 26 '24 10:06 nightkr

https://github.com/apache/zookeeper/pull/2173 has now been merged, and will be part of 3.9.4.

nightkr avatar Nov 27 '24 08:11 nightkr