You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kafka.apache.org by "Vincent Bernat (JIRA)" <ji...@apache.org> on 2016/05/11 05:58:12 UTC

[jira] [Created] (KAFKA-3700) CRL support

Vincent Bernat created KAFKA-3700:
-------------------------------------

             Summary: CRL support
                 Key: KAFKA-3700
                 URL: https://issues.apache.org/jira/browse/KAFKA-3700
             Project: Kafka
          Issue Type: Bug
          Components: security
    Affects Versions: 0.9.0.1
            Reporter: Vincent Bernat


Hey!

Currently, there is no way to specify a CRL to be checked when a client presents its TLS certificate. Therefore, a revoked certificate is accepted. A CRL can either be provided as an URL in a certificate but with a private authority, it is more common to have one as a separate file. A `ssl.crl.location` would come handy to specify a CRL.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)