Any chances of the following features to make it into the broker eventually?
1) ECDSA keys
2) Proxy Protocol V2
Does CAPI support ECDSA based TLS connections? If yes, I could get away with a TLS terminator supporting that key. Proxy protocol would be nice though to still being able to enjoy IP based access control on the broker.
Answers
-
Hi @Aleksei,
We support ECDH for keys, but not authentication. You can see the full list of Chipher Suites here: https://docs.solace.com/Security/TLS-SSL-Message-Encryption-Overview.htm?Highlight=TLS#Supporte
I'll see if we have any plans to support ECDSA.
1 -
Hi @Aleksei,
We do have a product backlog item to support these cipher suites but right now we dont have any confirmed dates for delivery.
I can send you an update when it is planned.
Hope this helps.
Regards
1