[KAFKA-2618] Disable SSL renegotiation for 0.9.0.0

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.9.0.0
• Component/s: security
• Assignee: Ismael Juma
• Reporter: Ismael Juma
• Reviewer: Jun Rao
• Created: 07/Oct/15 17:03
• Updated: 21/Oct/15 21:40
• Resolved: 21/Oct/15 21:39

Description

As discussed in KAFKA-2609, we don't have enough tests for SSL renegotiation to be confident that it works well. In addition, neither the clients or the server make use of renegotiation at this point.

For 0.9.0.0, we should disable renegotiation.