Vincent Bernat created KAFKA-3700:
-------------------------------------
Summary: CRL support
Key: KAFKA-3700
URL: https://issues.apache.org/jira/browse/KAFKA-3700
Project: Kafka
Issue Type: Bug
Components: security
Affects Versions: 0.9.0.1
Reporter: Vincent Bernat
Hey!
Currently, there is no way to specify a CRL to be checked when a client
presents its TLS certificate. Therefore, a revoked certificate is accepted. A
CRL can either be provided as an URL in a certificate but with a private
authority, it is more common to have one as a separate file. A
`ssl.crl.location` would come handy to specify a CRL.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
