Versions Compared

Old Version 11

changes.mady.by.user Hongchao Deng

Saved on

compared with

New Version 12

changes.mady.by.user Hongchao Deng

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The keyStore JKS file contains the server certificate and private key. This certificate needs to be trusted by the clients, i.e. include the server’s certificate or its CA in the client’s trustStore JKS files. Meanwhile the trustStore JKS file on the server contains the client certificates or CA to trust.

Once authentication is complete and a ZooKeeper session is established, the client may set ACLs against the “x509” scheme. x509 uses the client’s authenticated X500 Principal as an ACL ID identity. The ACL expression is the exact X500 Principal name of an authenticated client.

...