RE: Inquiry about using SSL encryption and SASL authentication for Kafka without specifying IP address in SAN in the CA certificate

Hi Richard, Thanks for your response. We are using IP in the advertised.listener and also passing IP in the property ' bootstrap.servers' while instantiating KafkaConsumer class. But in the server certificate only dns is used as SAN and not IP due to some security concerns. Regarding hostname

Re: Inquiry about using SSL encryption and SASL authentication for Kafka without specifying IP address in SAN in the CA certificate

Hi Deepak, Unfortunately you cannot disable that with the default client implementation as far as I know. The SSL connection is created using the SSL implementation provided by the JVM. It might be possible to do this with a different or custom SSL implementation or with a custom SSL Engine. You c