Hello All, I had submitted PIP-337 a few months ago regarding customizing the generation of SSL Context and SSL Engine. Based on past community feedback, I have made the required modifications in the PIP.
PIP link: https://github.com/apache/pulsar/pull/22016 Please can the community help review the PIP again and provide additional feedback. Best regards, Apurva Telang On Tue, Feb 6, 2024 at 11:58 AM Apurva Telang <apurvatelan...@gmail.com> wrote: > > Hello All, > > I have submitted a PIP to add a SSL Factory Plugin to customize the > generation of SSL Context and SSL Engine. > > Motivation: > Apache Pulsar's TLS encryption configuration is not pluggable. It only > supports file-based certificates. This makes Pulsar difficult to adopt for > organizations that require loading TLS certificates by other mechanisms. > > Goals: > > 1. Provide a mechanism to plugin a custom SSL Factory that can > generate SSL Context and SSL Engine. > 2. Simplify the Pulsar code base to universally use > javax.net.ssl.SSLContext and reduce the amount of code required to build > and configure the SSL context taking into consideration backwards > compatibility. > > PIP link: https://github.com/apache/pulsar/pull/22016 > > Please can the community review the PIP and provide your feedback. > > -- > Best regards, > Apurva Telang. > -- Best regards, Apurva Telang.
