Hi,

I'd like to know if its doable to config kafka ssl to that I can use OCSP
to revoke certificates.

My use case is a kafka broker(s) to which consumers will connect using ssl
(authentication + authorization). I will provide the certificates to my
consumers but I want to be sure I can revoke certificates when needed.

I'm aware a jvm instance can be tweaked to use OCSP by using the following
properties:
 - ocsp.enable=true, nocsp.responderURL=myOCSPServer  #security properties
 - com.sun.security.enableCRLDP=true, com.sun.net.ssl.checkRevocation=true
 #system properties
But I'm not sure how kafka will deal with those properties.

Best,

Reply via email to