KIP-127 — Pluggable JAAS LoginModule configuration for SSL

Discarded Security

Proposes a JAAS LoginModule-based pluggable authentication extension for SSL channels, enabling custom X.509-based authentication beyond the standard TLS handshake. The SSL channel only performed TLS handshake-based mutual authentication with no hook for additional credential validation logic, unlike SASL channels which already supported pluggable callbacks.

Details