Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Option to allow TLS based communication with Zookeeper Backend #4907

Closed
palsaurabh2005 opened this issue Jul 11, 2018 · 2 comments
Closed

Option to allow TLS based communication with Zookeeper Backend #4907

palsaurabh2005 opened this issue Jul 11, 2018 · 2 comments

Comments

@palsaurabh2005
Copy link
Contributor

palsaurabh2005 commented Jul 11, 2018

Is your feature request related to a problem? Please describe.
Zookeeper supports TLS based communication with clients. Vault should also be able to provide an option using configuration to enable TLS based communication with a Zookeeper Backend.

Describe the solution you'd like
Based on TLS related properties defined in the Zookeeper backend 'stanza' in Vault config, Vault should enable a TLS context to talk to Zookeeper backend.

Explain any additional use-cases
When verifying the Certificate presented by the Zookeeper backend, Vault should be able to verify the certificate's CN/SAN using either the IP address or DNS. Option to do so will be provided using a config flag. Default would be the DNS name.

Additional context
There is a closed issue pertaining to the same feature request(#1652). I am submitting this as a new issue, since I have not been able to gather attention to the pull request for this feature request.

CC: @devth @sherzberg @kenbreeman @elupu @reegz

@palsaurabh2005
Copy link
Contributor Author

@jefferai
Copy link
Member

Closing, essentially a duplicate of the PR the author previously made.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants