Kafka does not check the expiry of SSL certificates if host.cer is included in truststore ?

[Deepak Jain <de...@cumulus-systems.com>]

Hello fellow Kafka users,

I have came across this behaviour of kafka while using it in SASL_SSL mode. My observations are:

When we exclude the host.cer => Expiry date of certificate[1] in certificate chain of Keystore is consider.
When we include the host.cer => No expiry is check even for all 3 certificate in the chain.

Can anyone help me understands whether it's a known behaviour in kafka or an issue?


Any help would be appreciated.



Thanks,
Deepak