[KAFKA-13539] Improve propagation and processing of SSL handshake failures

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.1.0
• Fix Version/s: 3.2.0
• Component/s: security
• Assignee: Rajini Sivaram
• Reporter: Rajini Sivaram
• Reviewer: Manikumar
• Created: 13/Dec/21 10:52
• Updated: 14/Dec/21 10:02
• Resolved: 14/Dec/21 10:02

Description

When server fails SSL handshake and closes its connection, we attempt to report this to clients on a best-effort basis. However, our tests assume that peer always detects the failure. This may not be the case when there are delays. It will be good to improve reliability of handshake failure reporting.

Issue Links

• links to: GitHub Pull Request #11597