Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-5519

Support for multiple certificates in a single keystore

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 0.10.2.1
    • None
    • security

    Description

      Background
      Currently, we need to have a keystore exclusive to the component with exactly one key in it. Looking at the JSSE Reference guide, it seems like we would need to introduce our own KeyManager into the SSLContext which selects a configurable key alias name.
      https://docs.oracle.com/javase/7/docs/api/javax/net/ssl/X509KeyManager.html
      has methods for dealing with aliases.
      The goal here to use a specific certificate (with proper ACLs set for this client), and not just the first one that matches.
      Looks like it requires a code change to the SSLChannelBuilder

      Attachments

        Activity

          People

            Unassigned Unassigned
            alla@confluent.io Alla Tumarkin
            Votes:
            2 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated: