[KAFKA-15464] Allow dynamic reloading of certificates with different DN / SANs

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.7.0
• Assignee: Jakub Scholz
• Reporter: Jakub Scholz
• Created: 13/Sep/23 19:46
• Updated: 24/Nov/23 18:24
• Resolved: 24/Nov/23 18:24

Description

Kafka currently doesn't allow dynamic reloading of keystores when the new key has a different DN or removes some of the SANs. While it might help to prevent users from breaking their cluster, in some cases it would be great to be able to bypass this validation when desired.

More details are in the KIP-978: Allow dynamic reloading of certificates with different DN / SANs

Issue Links

• mentioned in: Page Loading...