public class ConfluentFipsValidator
extends java.lang.Object
implements org.apache.kafka.common.security.fips.FipsValidator
This class centralizes FIPS validation for cipher suites, SSL/TLS versions and kafka broker protocols. One of its primary uses is to validate FIPS requirements.
Constructor and Description |
---|
ConfluentFipsValidator() |
Modifier and Type | Method and Description |
---|---|
boolean |
fipsEnabled() |
void |
validateFipsBrokerProtocol(java.util.Map<java.lang.String,org.apache.kafka.common.security.auth.SecurityProtocol> securityProtocolMap) |
void |
validateFipsTls(java.util.Map<java.lang.String,?> configs)
Validate FIPS requirements on cipher suites, TLS protocols versions.
|
void |
validateFipsTlsCipherSuite(java.util.Collection<java.lang.String> cipherSuites) |
void |
validateFipsTlsCipherSuite(java.util.Map<java.lang.String,?> configs) |
void |
validateFipsTlsVersion(java.util.Collection<java.lang.String> tlsVersions) |
void |
validateFipsTlsVersion(java.util.Map<java.lang.String,?> configs) |
public boolean fipsEnabled()
fipsEnabled
in interface org.apache.kafka.common.security.fips.FipsValidator
public void validateFipsTls(java.util.Map<java.lang.String,?> configs)
validateFipsTls
in interface org.apache.kafka.common.security.fips.FipsValidator
configs
- the configuration contains cipher suites, TLS protocols.InvalidFipsCipherSuiteException
- if cipher suites not FIPS compliant.InvalidFipsTlsVersionException
- if TLS protocols not FIPS compliant.public void validateFipsBrokerProtocol(java.util.Map<java.lang.String,org.apache.kafka.common.security.auth.SecurityProtocol> securityProtocolMap)
validateFipsBrokerProtocol
in interface org.apache.kafka.common.security.fips.FipsValidator
public void validateFipsTlsCipherSuite(java.util.Map<java.lang.String,?> configs)
public void validateFipsTlsVersion(java.util.Map<java.lang.String,?> configs)
public void validateFipsTlsCipherSuite(java.util.Collection<java.lang.String> cipherSuites)
public void validateFipsTlsVersion(java.util.Collection<java.lang.String> tlsVersions)