KIP-967 — Support custom SSL configuration for Kafka Connect RestServer
Discussion ConnectSecurity
Extends Kafka Connect RestServer SSL configuration to honor ssl.engine.factory.class (with listeners.https. and admin.listeners.https. prefixes), enabling custom SslEngineFactory implementations for the Connect REST API. Previously, Connect's REST server only supported file-based keystores, blocking organizations that use hardware security modules or custom certificate providers.
Details
| Author | Taras Ledkov |
| Status | Discussion |
| JIRA | KAFKA-15335 |
| Wiki | View on Apache Wiki |
| Created | 2023-08-10 |
| Last Modified | 2023-11-07 |
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.