public class FipsValidator
extends java.lang.Object
This class centralizes FIPS validation for cipher suites, SSL/TLS versions and kafka broker protocols. One of its primary uses is to validate FIPS requirements.
Modifier and Type | Method and Description |
---|---|
static void |
validateFipsBrokerProtocol(java.util.Map<org.apache.kafka.common.network.ListenerName,org.apache.kafka.common.security.auth.SecurityProtocol> securityProtocolMap) |
static void |
validateFipsTls(java.util.Map<java.lang.String,?> configs)
Validate FIPS requirements on cipher suites, TLS protocols versions.
|
static void |
validateFipsTlsCipherSuite(java.util.Collection<java.lang.String> cipherSuites) |
static void |
validateFipsTlsCipherSuite(java.util.Map<java.lang.String,?> configs) |
static void |
validateFipsTlsVersion(java.util.Collection<java.lang.String> tlsVersions) |
static void |
validateFipsTlsVersion(java.util.Map<java.lang.String,?> configs) |
public static void validateFipsTls(java.util.Map<java.lang.String,?> configs)
configs
- the configuration contains cipher suites, TLS protocols.InvalidFipsCipherSuiteException
- if cipher suites not FIPS compliant.InvalidFipsTlsVersionException
- if TLS protocols not FIPS compliant.public static void validateFipsBrokerProtocol(java.util.Map<org.apache.kafka.common.network.ListenerName,org.apache.kafka.common.security.auth.SecurityProtocol> securityProtocolMap)
public static void validateFipsTlsCipherSuite(java.util.Map<java.lang.String,?> configs)
public static void validateFipsTlsVersion(java.util.Map<java.lang.String,?> configs)
public static void validateFipsTlsCipherSuite(java.util.Collection<java.lang.String> cipherSuites)
public static void validateFipsTlsVersion(java.util.Collection<java.lang.String> tlsVersions)