[KAFKA-6810] Enable dynamic reconfiguration of SSL truststores

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Component/s: security
• Assignee: Rajini Sivaram
• Reporter: Rajini Sivaram
• Created: 20/Apr/18 13:18
• Updated: 03/Aug/18 08:10
• Resolved: 30/Apr/18 20:43

Description

We currently allow broker's SSL keystores to be dynamically reconfigured to support short-lived keystores (KIP-226). It will be useful to allow truststores to be reconfigured as well to allow new certificates to be added and also to remove certifcates.

Issue Links

• links to: GitHub Pull Request #4904