[
https://issues.apache.org/jira/browse/KAFKA-20784?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Fahid Abdullah reassigned KAFKA-20784:
--------------------------------------
Assignee: Fahid Abdullah
> Change certificate management
> -----------------------------
>
> Key: KAFKA-20784
> URL: https://issues.apache.org/jira/browse/KAFKA-20784
> Project: Kafka
> Issue Type: Wish
> Components: controller
> Affects Versions: 4.3.1
> Reporter: David Scrève
> Assignee: Fahid Abdullah
> Priority: Major
>
> When using custom SSL certificate, we need to provide a Client AND Server
> certificate because Kafka use it internally for communication between
> Controller.
> This kind of certificate is strongly discouraged and will be soon rejected by
> Google and others...
> Like K8S, you should use your own CA and generate your own certificates for
> internal communication and use the SSL certificate only for external
> communication with clients.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
