[
https://issues.apache.org/jira/browse/KAFKA-20997?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Mickael Maison resolved KAFKA-20997.
------------------------------------
Fix Version/s: 4.5.0
Resolution: Fixed
> Support running in FIPS environments
> ------------------------------------
>
> Key: KAFKA-20997
> URL: https://issues.apache.org/jira/browse/KAFKA-20997
> Project: Kafka
> Issue Type: Improvement
> Reporter: Mickael Maison
> Assignee: Mickael Maison
> Priority: Major
> Fix For: 4.5.0
>
>
> The default SSL engine factory implementation statically loads a KeyFactory
> for the DSA algorithm at startup. This prevents brokers from stating in FIPS
> environments where DSA is not available.
> Instead of failing at the key factory creation, broekrs should ignore key
> factories that can't be loaded (just log a message) and only fail if a key
> requires a factory that wasn't loaded.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
