[KAFKA-8190] Keystore update without file change doesn't update SSLContext

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0, 2.2.0, 2.1.1
• Fix Version/s: 2.3.0, 2.1.2, 2.2.1
• Component/s: core
• Assignee: Rajini Sivaram
• Reporter: Rajini Sivaram
• Reviewer: Manikumar
• Created: 04/Apr/19 21:42
• Updated: 05/Apr/19 18:58
• Resolved: 05/Apr/19 18:58

Description

We reload SSL keystores and truststores on a dynamic config update on the broker if one of the configs has changed or if the file modification time has changed. For update without config change, we compare the modification time at the last load with the current modification time of the file. But we load the file for validation of dynamic configs and when reconfiguring we compare the time updated during validation with file modification time. As a result SSLContext is not updated.

Issue Links

• links to: GitHub Pull Request #6539