PKCS #12 format works fine when used to provide ZooKeeper keystore, but additional steps are needed to use it for a dedicated truststore. You will get the following error when you try to use PKCS #12 truststore. 2021-08-08 14:06:48,947 [myid:3] - WARN [QuorumConnectionThread-[myid=3]-86:QuorumCnxManager@397] - Cannot open secure channel to 2 at election address zookeeper2.example.org/172.16.0.112:3888 org.apache.zookeeper.common.X509Exception$SSLContextException: […]
↧