This is an automated email from the ASF dual-hosted git repository.
andor pushed a commit to branch branch-3.8
in repository https://gitbox.apache.org/repos/asf/zookeeper.git
The following commit(s) were added to refs/heads/branch-3.8 by this push:
new 2f008d884 ZOOKEEPER-4393: [ADDENDUM] Add docs of fips-mode to
ZooKeeper Admin Guide (#2015)
2f008d884 is described below
commit 2f008d884272ebb6b5643748786a8097f7eefc1e
Author: Andor Molnár <[email protected]>
AuthorDate: Sun Jul 2 15:54:17 2023 +0200
ZOOKEEPER-4393: [ADDENDUM] Add docs of fips-mode to ZooKeeper Admin Guide
(#2015)
* ZOOKEEPER-4393: [ADDENDUM] Add docs of fips-mode to ZooKeeper Admin Guide
* ZOOKEEPER-4393: Some cosmetics
---
zookeeper-docs/src/main/resources/markdown/zookeeperAdmin.md | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/zookeeper-docs/src/main/resources/markdown/zookeeperAdmin.md
b/zookeeper-docs/src/main/resources/markdown/zookeeperAdmin.md
index 23e85804b..73caec817 100644
--- a/zookeeper-docs/src/main/resources/markdown/zookeeperAdmin.md
+++ b/zookeeper-docs/src/main/resources/markdown/zookeeperAdmin.md
@@ -1797,6 +1797,14 @@ and [SASL authentication for
ZooKeeper](https://cwiki.apache.org/confluence/disp
This parameter has no effect, unless you enable the MultiAddress feature
by setting *multiAddress.enabled=true*.
+* *fips-mode* :
+ (Java system property: **zookeeper.fips-mode**)
+ **New in 3.8.2:**
+ Enable FIPS compatibility mode in ZooKeeper. If enabled, the custom trust
manager (`ZKTrustManager`) that is used for
+ hostname verification will be disabled in order to comply with FIPS
requirements. As a consequence, hostname verification is not
+ available in the Quorum protocol, but still can be set in client-server
communication. Default: **true** (3.9.0+),
+ **false** (3.8.x)
+
<a name="Experimental+Options%2FFeatures"></a>
#### Experimental Options/Features