a0x8o / kafka

A high-throughput, distributed, publish-subscribe messaging system
Apache License 2.0
67 stars 171 forks source link

FIPS compliance of the org.apache.kafka:kafka-clients artifact. #58

Open fburman-mule opened 5 months ago

fburman-mule commented 5 months ago

There are three security providers added by the artifact and there's no official documentation that explain wether these are FIPS 140-2 compliant.

org.apache.kafka.common.security.plain.internals.PlainSaslServerProvider org.apache.kafka.common.security.scram.internals.ScramSaslClientProvider org.apache.kafka.common.security.scram.internals.ScramSaslServerProvider

Is there any docs about this?