Support for Elliptic Curve Cryptography (EC, ECC) (certificates/private keys)
- Dominant language
- Java
- Stars
- 15.3k
- Forks
- 3.8k
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 160
Description
**Is your enhancement request related to a problem? Please describe.**
I was trying to setup Transport Encryption using TLS with EC private key/certificate. Problem is that pulsar cannot use EC private key and probably EC certificates at all. I needed to replace this "new" EC certificate which i was intended to use with another which have RSA private key. In logs I can see only "Invalid RSA private key" and "Version must be 0", that's not very explanatory to me. So maybe a note about unsupported EC in docs would be appreciated.
**Describe the solution you'd like**
Solution is to add support for ECC to pulsar.
**Describe alternatives you've considered**
Alternative is to add note to documentation about unsupported ECC certificates/keys in pulsar.
**Additional context**
Today ECC is almost standard for commercial SSL certificates.
see: https://www.thesslstore.com/blog/you-should-be-using-ecc-for-your-ssl-tls-certificates/
note: in my description I was talking about pulsar broker, I have not tested any other components, but it would be great if pulsar supports ECC everywhere
Contributor guide
Assessment
This issue has not been assessed yet.