apache / apache/pulsar

Support for Elliptic Curve Cryptography (EC, ECC) (certificates/private keys)

Open
#11,431 3 comments 0 reactions 1 assignee Claimed by @mattisonchao View on GitHub
lifecycle/stale type/enhancement
Dominant language
Java
Stars
15.3k
Forks
3.8k
Avg merge
1d 14h
Merged PRs (30d)
160

Description

**Is your enhancement request related to a problem? Please describe.**
I was trying to setup Transport Encryption using TLS with EC private key/certificate. Problem is that pulsar cannot use EC private key and probably EC certificates at all. I needed to replace this "new" EC certificate which i was intended to use with another which have RSA private key. In logs I can see only "Invalid RSA private key" and "Version must be 0", that's not very explanatory to me. So maybe a note about unsupported EC in docs would be appreciated.

**Describe the solution you'd like**
Solution is to add support for ECC to pulsar.

**Describe alternatives you've considered**
Alternative is to add note to documentation about unsupported ECC certificates/keys in pulsar.

**Additional context**
Today ECC is almost standard for commercial SSL certificates.
see: https://www.thesslstore.com/blog/you-should-be-using-ecc-for-your-ssl-tls-certificates/

note: in my description I was talking about pulsar broker, I have not tested any other components, but it would be great if pulsar supports ECC everywhere

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.