You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Yu Yang (Jira)" <ji...@apache.org> on 2020/11/17 08:30:00 UTC

[jira] [Updated] (KAFKA-10731) have kafka producer & consumer auto-reload ssl certificate

     [ https://issues.apache.org/jira/browse/KAFKA-10731?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yu Yang updated KAFKA-10731:
----------------------------
    Affects Version/s: 2.3.1

> have kafka producer & consumer  auto-reload ssl certificate 
> ------------------------------------------------------------
>
>                 Key: KAFKA-10731
>                 URL: https://issues.apache.org/jira/browse/KAFKA-10731
>             Project: Kafka
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 2.3.1
>            Reporter: Yu Yang
>            Priority: Major
>
> We use SSL in both brokers and kafka clients for authenticate and authorization, and rotates the certificates every 12 hours.  Kafka producers and consumer cannot pick up the rotated certs. This causes stream processing interruption (e.g.  flink connector does not handle ssl exception, and the flink applicatoin has to be restarted when we hit this error).  We need to improve kafka producer & client to support ssl certificate dynamic loading. 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)