Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view

Large diffs are not rendered by default.

Original file line number Diff line number Diff line change
Expand Up @@ -162,15 +162,15 @@ with the following path and query parameters:
| *securityProtocol* (security) | Protocol used to communicate with brokers. Valid values are: PLAINTEXT, SSL, SASL_PLAINTEXT, SASL_SSL. | PLAINTEXT | String
| *securityProviders* (security) | A list of configurable creator classes each returning a provider implementing security algorithms. These classes should implement the org.apache.kafka.common.security.auth.SecurityProviderCreator interface. | | String
| *sslCipherSuites* (security) | A list of cipher suites. This is a named combination of authentication, encryption, MAC and key exchange algorithm used to negotiate the security settings for a network connection using TLS or SSL network protocol. By default all the available cipher suites are supported. | | String
| *sslEnabledProtocols* (security) | The list of protocols enabled for SSL connections. The default is 'TLSv1.2,TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. With the default value for Java 11, clients and servers will prefer TLSv1.3 if both support it and fallback to TLSv1.2 otherwise (assuming both support at least TLSv1.2). This default should be fine for most cases. Also see the config documentation for ssl.protocol. | TLSv1.2,TLSv1.3 | String
| *sslEnabledProtocols* (security) | The list of protocols enabled for SSL connections. The default is 'TLSv1.2,TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. With the default value for Java 11, clients and servers will prefer TLSv1.3 if both support it and fallback to TLSv1.2 otherwise (assuming both support at least TLSv1.2). This default should be fine for most cases. Also see the config documentation for ssl.protocol. | TLSv1.2 | String
| *sslEndpointIdentification{zwsp}Algorithm* (security) | The endpoint identification algorithm to validate server hostname using server certificate. | https | String
| *sslEngineFactoryClass* (security) | The class of type org.apache.kafka.common.security.auth.SslEngineFactory to provide SSLEngine objects. Default value is org.apache.kafka.common.security.ssl.DefaultSslEngineFactory | | String
| *sslKeymanagerAlgorithm* (security) | The algorithm used by key manager factory for SSL connections. Default value is the key manager factory algorithm configured for the Java Virtual Machine. | SunX509 | String
| *sslKeyPassword* (security) | The password of the private key in the key store file. This is optional for client. | | String
| *sslKeystoreLocation* (security) | The location of the key store file. This is optional for client and can be used for two-way authentication for client. | | String
| *sslKeystorePassword* (security) | The store password for the key store file. This is optional for client and only needed if ssl.keystore.location is configured. | | String
| *sslKeystoreType* (security) | The file format of the key store file. This is optional for client. | JKS | String
| *sslProtocol* (security) | The SSL protocol used to generate the SSLContext. The default is 'TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. This value should be fine for most use cases. Allowed values in recent JVMs are 'TLSv1.2' and 'TLSv1.3'. 'TLS', 'TLSv1.1', 'SSL', 'SSLv2' and 'SSLv3' may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities. With the default value for this config and 'ssl.enabled.protocols', clients will downgrade to 'TLSv1.2' if the server does not support 'TLSv1.3'. If this config is set to 'TLSv1.2', clients will not use 'TLSv1.3' even if it is one of the values in ssl.enabled.protocols and the server only supports 'TLSv1.3'. | TLSv1.3 | String
| *sslProtocol* (security) | The SSL protocol used to generate the SSLContext. The default is 'TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. This value should be fine for most use cases. Allowed values in recent JVMs are 'TLSv1.2' and 'TLSv1.3'. 'TLS', 'TLSv1.1', 'SSL', 'SSLv2' and 'SSLv3' may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities. With the default value for this config and 'ssl.enabled.protocols', clients will downgrade to 'TLSv1.2' if the server does not support 'TLSv1.3'. If this config is set to 'TLSv1.2', clients will not use 'TLSv1.3' even if it is one of the values in ssl.enabled.protocols and the server only supports 'TLSv1.3'. | TLSv1.2 | String
| *sslProvider* (security) | The name of the security provider used for SSL connections. Default value is the default security provider of the JVM. | | String
| *sslSecureRandomImplementation* (security) | The SecureRandom PRNG implementation to use for SSL cryptography operations. | | String
| *sslTrustmanagerAlgorithm* (security) | The algorithm used by trust manager factory for SSL connections. Default value is the trust manager factory algorithm configured for the Java Virtual Machine. | PKIX | String
Expand Down Expand Up @@ -272,15 +272,15 @@ The Vert.x Kafka component supports 98 options, which are listed below.
| *securityProtocol* (security) | Protocol used to communicate with brokers. Valid values are: PLAINTEXT, SSL, SASL_PLAINTEXT, SASL_SSL. | PLAINTEXT | String
| *securityProviders* (security) | A list of configurable creator classes each returning a provider implementing security algorithms. These classes should implement the org.apache.kafka.common.security.auth.SecurityProviderCreator interface. | | String
| *sslCipherSuites* (security) | A list of cipher suites. This is a named combination of authentication, encryption, MAC and key exchange algorithm used to negotiate the security settings for a network connection using TLS or SSL network protocol. By default all the available cipher suites are supported. | | String
| *sslEnabledProtocols* (security) | The list of protocols enabled for SSL connections. The default is 'TLSv1.2,TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. With the default value for Java 11, clients and servers will prefer TLSv1.3 if both support it and fallback to TLSv1.2 otherwise (assuming both support at least TLSv1.2). This default should be fine for most cases. Also see the config documentation for ssl.protocol. | TLSv1.2,TLSv1.3 | String
| *sslEnabledProtocols* (security) | The list of protocols enabled for SSL connections. The default is 'TLSv1.2,TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. With the default value for Java 11, clients and servers will prefer TLSv1.3 if both support it and fallback to TLSv1.2 otherwise (assuming both support at least TLSv1.2). This default should be fine for most cases. Also see the config documentation for ssl.protocol. | TLSv1.2 | String
| *sslEndpointIdentification{zwsp}Algorithm* (security) | The endpoint identification algorithm to validate server hostname using server certificate. | https | String
| *sslEngineFactoryClass* (security) | The class of type org.apache.kafka.common.security.auth.SslEngineFactory to provide SSLEngine objects. Default value is org.apache.kafka.common.security.ssl.DefaultSslEngineFactory | | String
| *sslKeymanagerAlgorithm* (security) | The algorithm used by key manager factory for SSL connections. Default value is the key manager factory algorithm configured for the Java Virtual Machine. | SunX509 | String
| *sslKeyPassword* (security) | The password of the private key in the key store file. This is optional for client. | | String
| *sslKeystoreLocation* (security) | The location of the key store file. This is optional for client and can be used for two-way authentication for client. | | String
| *sslKeystorePassword* (security) | The store password for the key store file. This is optional for client and only needed if ssl.keystore.location is configured. | | String
| *sslKeystoreType* (security) | The file format of the key store file. This is optional for client. | JKS | String
| *sslProtocol* (security) | The SSL protocol used to generate the SSLContext. The default is 'TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. This value should be fine for most use cases. Allowed values in recent JVMs are 'TLSv1.2' and 'TLSv1.3'. 'TLS', 'TLSv1.1', 'SSL', 'SSLv2' and 'SSLv3' may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities. With the default value for this config and 'ssl.enabled.protocols', clients will downgrade to 'TLSv1.2' if the server does not support 'TLSv1.3'. If this config is set to 'TLSv1.2', clients will not use 'TLSv1.3' even if it is one of the values in ssl.enabled.protocols and the server only supports 'TLSv1.3'. | TLSv1.3 | String
| *sslProtocol* (security) | The SSL protocol used to generate the SSLContext. The default is 'TLSv1.3' when running with Java 11 or newer, 'TLSv1.2' otherwise. This value should be fine for most use cases. Allowed values in recent JVMs are 'TLSv1.2' and 'TLSv1.3'. 'TLS', 'TLSv1.1', 'SSL', 'SSLv2' and 'SSLv3' may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities. With the default value for this config and 'ssl.enabled.protocols', clients will downgrade to 'TLSv1.2' if the server does not support 'TLSv1.3'. If this config is set to 'TLSv1.2', clients will not use 'TLSv1.3' even if it is one of the values in ssl.enabled.protocols and the server only supports 'TLSv1.3'. | TLSv1.2 | String
| *sslProvider* (security) | The name of the security provider used for SSL connections. Default value is the default security provider of the JVM. | | String
| *sslSecureRandomImplementation* (security) | The SecureRandom PRNG implementation to use for SSL cryptography operations. | | String
| *sslTrustmanagerAlgorithm* (security) | The algorithm used by trust manager factory for SSL connections. Default value is the trust manager factory algorithm configured for the Java Virtual Machine. | PKIX | String
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -79,17 +79,17 @@ public class VertxKafkaConfiguration
@UriParam(label = "common,security", defaultValue = "PLAINTEXT")
private String securityProtocol = "PLAINTEXT";
// ssl.protocol
@UriParam(label = "common,security", defaultValue = "TLSv1.3")
private String sslProtocol = "TLSv1.3";
@UriParam(label = "common,security", defaultValue = "TLSv1.2")
private String sslProtocol = "TLSv1.2";
// ssl.provider
@UriParam(label = "common,security")
private String sslProvider;
// ssl.cipher.suites
@UriParam(label = "common,security")
private String sslCipherSuites;
// ssl.enabled.protocols
@UriParam(label = "common,security", defaultValue = "TLSv1.2,TLSv1.3")
private String sslEnabledProtocols = "TLSv1.2,TLSv1.3";
@UriParam(label = "common,security", defaultValue = "TLSv1.2")
private String sslEnabledProtocols = "TLSv1.2";
// ssl.keystore.type
@UriParam(label = "common,security", defaultValue = "JKS")
private String sslKeystoreType = "JKS";
Expand Down
Loading