io.confluent.kafka.security.fips

Class ConfluentFipsValidator

java.lang.Object

io.confluent.kafka.security.fips.ConfluentFipsValidator

All Implemented Interfaces:

org.apache.kafka.common.security.fips.FipsValidator

public class ConfluentFipsValidator
extends Object
implements org.apache.kafka.common.security.fips.FipsValidator

This class centralizes FIPS validation for cipher suites, SSL/TLS versions and kafka broker protocols. One of its primary uses is to validate FIPS requirements.

Constructor Summary

Constructors

Constructor and Description
ConfluentFipsValidator()

Method Summary

Modifier and Type	Method and Description
boolean	fipsEnabled()
void	validateFipsBrokerProtocol(Map<String,org.apache.kafka.common.security.auth.SecurityProtocol> securityProtocolMap)
void	validateFipsTls(Map<String,?> configs) Validate FIPS requirements on cipher suites, TLS protocols versions.
void	validateFipsTlsCipherSuite(Collection<String> cipherSuites)
void	validateFipsTlsCipherSuite(Map<String,?> configs)
void	validateFipsTlsVersion(Collection<String> tlsVersions)
void	validateFipsTlsVersion(Map<String,?> configs)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ConfluentFipsValidator

public ConfluentFipsValidator()

Method Detail

fipsEnabled

public boolean fipsEnabled()

Specified by:

fipsEnabled in interface org.apache.kafka.common.security.fips.FipsValidator

validateFipsTls

public void validateFipsTls(Map<String,?> configs)

Validate FIPS requirements on cipher suites, TLS protocols versions.

Specified by:

validateFipsTls in interface org.apache.kafka.common.security.fips.FipsValidator

Parameters:

configs - the configuration contains cipher suites, TLS protocols.

Throws:

InvalidFipsCipherSuiteException - if cipher suites not FIPS compliant.

InvalidFipsTlsVersionException - if TLS protocols not FIPS compliant.

validateFipsBrokerProtocol

public void validateFipsBrokerProtocol(Map<String,org.apache.kafka.common.security.auth.SecurityProtocol> securityProtocolMap)

Specified by:

validateFipsBrokerProtocol in interface org.apache.kafka.common.security.fips.FipsValidator

validateFipsTlsCipherSuite

public void validateFipsTlsCipherSuite(Map<String,?> configs)

validateFipsTlsVersion

public void validateFipsTlsVersion(Map<String,?> configs)

validateFipsTlsCipherSuite

public void validateFipsTlsCipherSuite(Collection<String> cipherSuites)

validateFipsTlsVersion

public void validateFipsTlsVersion(Collection<String> tlsVersions)