[ 
https://issues.apache.org/jira/browse/KAFKA-2581?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14908890#comment-14908890
 ] 

Ewen Cheslack-Postava commented on KAFKA-2581:
----------------------------------------------

[~ijuma] We should absolutely test that inter broker replication works with 
SSL. But that doesn't mean every test needs to run with and without SSL. In 
particular, as long as another test validates replication works *at all* with 
SSL, I'm not sure you gain anything by running replication_test under both 
modes. Would SSL introduce a failure mode, specifically for replication, that 
wouldn't exist in plaintext (that isn't just something like a config issue for 
the protocols the broker is using)?

More specifically, suppose we add a test that's just validates data is 
replicated when it is produced -- not in the face of failures/broker restarts. 
This is probably a simpler, smaller test, and easier to debug if something 
*does* break with SSL. If that were there, would we want replication_test to 
run under anything but plaintext?

> Run all existing ducktape tests with SSL-enabled clients and brokers
> --------------------------------------------------------------------
>
>                 Key: KAFKA-2581
>                 URL: https://issues.apache.org/jira/browse/KAFKA-2581
>             Project: Kafka
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.9.0.0
>            Reporter: Rajini Sivaram
>            Assignee: Rajini Sivaram
>             Fix For: 0.9.0.0
>
>
> New ducktape tests for testing SSL are being added under KAFKA-2417. This 
> task will enable existing ducktape tests to be run with SSL-enabled brokers 
> and clients.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to