[KAFKA-2656] Default SSL keystore and truststore config are unusable

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 0.9.0.0
• Assignee: Rajini Sivaram
• Reporter: Rajini Sivaram
• Created: 14/Oct/15 21:34
• Updated: 19/Oct/15 20:49
• Resolved: 19/Oct/15 20:49

Description

Default truststore for clients and default key and truststore for Kafka server are set to files in /tmp along with simplistic passwords. Since no sample stores are packaged with Kafka anyway, there is no value in hardcoded paths and passwords as defaults.

Moreover these defaults prevent the use of standard javax.net.ssl properties. And they force truststores to be set in Kafka configuration even when certificates are signed by a trusted authority included in the Java cacerts.

Default keystores and truststores should be replaced with JVM defaults.