Mickael Maison created KAFKA-20997:
--------------------------------------
Summary: Support running in FIPS environments
Key: KAFKA-20997
URL: https://issues.apache.org/jira/browse/KAFKA-20997
Project: Kafka
Issue Type: Improvement
Reporter: Mickael Maison
Assignee: Mickael Maison
The default SSL engine factory implementation statically loads a KeyFactory for
the DSA algorithm at startup. This prevents brokers from stating in FIPS
environments where DSA is not available.
Instead of failing at the key factory creation, broekrs should ignore key
factories that can't be loaded (just log a message) and only fail if a key
requires a factory that wasn't loaded.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
