Hello All,

I have submitted a PIP to add a SSL Factory Plugin to customize the
generation of SSL Context and SSL Engine.

Motivation:
Apache Pulsar's TLS encryption configuration is not pluggable. It only
supports file-based certificates. This makes Pulsar difficult to adopt for
organizations that require loading TLS certificates by other mechanisms.

Goals:

   1. Provide a mechanism to plugin a custom SSL Factory that can generate
   SSL Context and SSL Engine.
   2. Simplify the Pulsar code base to universally use
   javax.net.ssl.SSLContext and reduce the amount of code required to build
   and configure the SSL context taking into consideration backwards
   compatibility.

PIP link: https://github.com/apache/pulsar/pull/22016

Please can the community review the PIP and provide your feedback.

--
Best regards,
Apurva Telang.

Reply via email to