Êþº¾4×} 7~€ ‚ƒ „…† ‡ˆ‰Š‹ Œ „Ž‘’“”• „–—˜ ™š›œžŸ ¡¢£ ¤¥¦ §¨©ª«¬­® ¯° ± ²³ ´³µ ¶· ¸¹PRINCIPAL_BUILDER_CLASS_CONFIGLjava/lang/String; ConstantValueº DeprecatedRuntimeVisibleAnnotationsLjava/lang/Deprecated;PRINCIPAL_BUILDER_CLASS_DOC»DEFAULT_PRINCIPAL_BUILDER_CLASSSSL_PROTOCOL_CONFIGSSL_PROTOCOL_DOCDEFAULT_SSL_PROTOCOLSSL_PROVIDER_CONFIGSSL_PROVIDER_DOCSSL_CIPHER_SUITES_CONFIGSSL_CIPHER_SUITES_DOCSSL_ENABLED_PROTOCOLS_CONFIGSSL_ENABLED_PROTOCOLS_DOCDEFAULT_SSL_ENABLED_PROTOCOLSSSL_KEYSTORE_TYPE_CONFIGSSL_KEYSTORE_TYPE_DOCDEFAULT_SSL_KEYSTORE_TYPESSL_KEYSTORE_LOCATION_CONFIGSSL_KEYSTORE_LOCATION_DOCSSL_KEYSTORE_PASSWORD_CONFIGSSL_KEYSTORE_PASSWORD_DOCSSL_KEY_PASSWORD_CONFIGSSL_KEY_PASSWORD_DOCSSL_TRUSTSTORE_TYPE_CONFIGSSL_TRUSTSTORE_TYPE_DOCDEFAULT_SSL_TRUSTSTORE_TYPESSL_TRUSTSTORE_LOCATION_CONFIGSSL_TRUSTSTORE_LOCATION_DOCSSL_TRUSTSTORE_PASSWORD_CONFIGSSL_TRUSTSTORE_PASSWORD_DOCSSL_KEYMANAGER_ALGORITHM_CONFIGSSL_KEYMANAGER_ALGORITHM_DOCDEFAULT_SSL_KEYMANGER_ALGORITHM!SSL_TRUSTMANAGER_ALGORITHM_CONFIGSSL_TRUSTMANAGER_ALGORITHM_DOC"DEFAULT_SSL_TRUSTMANAGER_ALGORITHM,SSL_ENDPOINT_IDENTIFICATION_ALGORITHM_CONFIG)SSL_ENDPOINT_IDENTIFICATION_ALGORITHM_DOC-DEFAULT_SSL_ENDPOINT_IDENTIFICATION_ALGORITHM'SSL_SECURE_RANDOM_IMPLEMENTATION_CONFIG$SSL_SECURE_RANDOM_IMPLEMENTATION_DOCSSL_CLIENT_AUTH_CONFIG¼SSL_CLIENT_AUTH_DOC½RECONFIGURABLE_CONFIGSLjava/util/Set; Signature#Ljava/util/Set;()VCodeLineNumberTableLocalVariableTablethis+Lorg/apache/kafka/common/config/SslConfigs;addClientSslSupport-(Lorg/apache/kafka/common/config/ConfigDef;)Vconfig*Lorg/apache/kafka/common/config/ConfigDef; SourceFileSslConfigs.java>org/apache/kafka/common/config/internals/BrokerSecurityConfigs op)org/apache/kafka/common/config/SslConfigs ssl.protocol¾ ÁÂTLSà ÅÆThe SSL protocol used to generate the SSLContext. Default setting is TLS, which is fine for most cases. Allowed values in recent JVMs are TLS, TLSv1.1 and TLSv1.2. SSL, SSLv2 and SSLv3 may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities.Ç ÈÉ ssl.providervThe name of the security provider used for SSL connections. Default value is the default security provider of the JVM.ssl.cipher.suites Ê ËÆA list of cipher suites. This is a named combination of authentication, encryption, MAC and key exchange algorithm used to negotiate the security settings for a network connection using TLS or SSL network protocol. By default all the available cipher suites are supported.ssl.enabled.protocolsTLSv1.2,TLSv1.1,TLSv12The list of protocols enabled for SSL connections.ssl.keystore.typeJKSCThe file format of the key store file. This is optional for client.ssl.keystore.location ÌÆvThe location of the key store file. This is optional for client and can be used for two-way authentication for client.ssl.keystore.password ÍÂThe store password for the key store file. This is optional for client and only needed if ssl.keystore.location is configured. ssl.key.passwordSThe password of the private key in the key store file. This is optional for client.ssl.truststore.type(The file format of the trust store file.ssl.truststore.location&The location of the trust store file. ssl.truststore.passwordThe password for the trust store file. If a password is not set access to the truststore is still available, but integrity checking is disabled.ssl.keymanager.algorithm ^9šThe algorithm used by key manager factory for SSL connections. Default value is the key manager factory algorithm configured for the Java Virtual Machine.ssl.trustmanager.algorithm a9žThe algorithm used by trust manager factory for SSL connections. Default value is the trust manager factory algorithm configured for the Java Virtual Machine.%ssl.endpoint.identification.algorithmhttps\The endpoint identification algorithm to validate server hostname using server certificate.  ssl.secure.random.implementationMThe SecureRandom PRNG implementation to use for SSL cryptography operations. =org/apache/kafka/common/security/auth/DefaultPrincipalBuilderÎ ÏÐ A9Ñ ÒÐÓjava/lang/StringÔ ÕÖ kljava/lang/Objectprincipal.builder.class]The fully qualified name of a class that implements the KafkaPrincipalBuilder interface, which is used to build the KafkaPrincipal object used during authorization. This config also supports the deprecated PrincipalBuilder interface which was previously used for client authentication over SSL. If no principal builder is defined, the default behavior depends on the security protocol in use. For SSL authentication, the principal name will be the distinguished name from the client certificate if one is provided; otherwise, if client authentication is not required, the principal name will be ANONYMOUS. For SASL authentication, the principal will be derived using the rules defined by sasl.kerberos.principal.to.local.rules if GSSAPI is in use, and the SASL authentication ID for other mechanisms. For PLAINTEXT, the principal will be ANONYMOUS.ssl.client.authãConfigures kafka broker to request client authentication. The following settings are common:
  • ssl.client.auth=required If set to required client authentication is required.
  • ssl.client.auth=requested This means client authentication is optional. unlike requested , if this option is set client can choose not to provide authentication information about itself
  • ssl.client.auth=none This means client authentication is not needed.-org/apache/kafka/common/config/ConfigDef$TypeType InnerClassesSTRING/Lorg/apache/kafka/common/config/ConfigDef$Type;3org/apache/kafka/common/config/ConfigDef$Importance ImportanceMEDIUM5Lorg/apache/kafka/common/config/ConfigDef$Importance;(org/apache/kafka/common/config/ConfigDefdefineÆ(Ljava/lang/String;Lorg/apache/kafka/common/config/ConfigDef$Type;Ljava/lang/Object;Lorg/apache/kafka/common/config/ConfigDef$Importance;Ljava/lang/String;)Lorg/apache/kafka/common/config/ConfigDef;LISTLOWHIGHPASSWORDjava/lang/ClassgetName()Ljava/lang/String;javax/net/ssl/KeyManagerFactorygetDefaultAlgorithm!javax/net/ssl/TrustManagerFactory#org/apache/kafka/common/utils/UtilsmkSet$([Ljava/lang/Object;)Ljava/util/Set;!7+89:;<=>?9:@<=>A9<=>B9:C9:D9:E9: F9: G9: H9:I9:J9:K9:L9:M9:N9:O9:P9:Q9:R9:S9:T9:U9:V9:W9:X9: Y9:!Z9:"[9:#\9:$]9:&^9_9:'`9:)a9b9:*c9:,d9:+e9:-f9:.g9:h<=>i9:j<=>klmnopq/*·±rs tu vwqDÞ*²²¶  ²² ¶  ² ²¶ ² ²¶ ²²¶ ²²¶ ²²¶ ²²¶ ²²¶  ²²!¶ "²²#¶ $²²%²&¶ '²²(²)¶ *²+²,¶ -²².¶ W±rB}~)8€GU‚cƒq„€…Ž†œ‡¬ˆ¼‰ËŠÙ‹ÝŒs ÞxyzpqlD/¶0³1¸2³%¸3³(½4YSYSYSYSYSY SY"S¸5³6±r/0chŽ{|À‡¿@„‡Ä@