summaryrefslogtreecommitdiff
path: root/kafka/consumer/group.py
diff options
context:
space:
mode:
authorDana Powers <dana.powers@gmail.com>2019-03-21 08:32:45 -0700
committerDana Powers <dana.powers@gmail.com>2019-03-21 08:32:45 -0700
commitac7efc0426fa641a6754c25a9b2e5e2fa3515bf6 (patch)
treebe41549b0f4b3d02e95a80665ede862302cb3fe1 /kafka/consumer/group.py
parentee4a53e9e5ae93231d6f7010f263b30a9924dabb (diff)
downloadkafka-python-ssl_set_ciphers.tar.gz
Allow configuration of SSL Ciphersssl_set_ciphers
Diffstat (limited to 'kafka/consumer/group.py')
-rw-r--r--kafka/consumer/group.py6
1 files changed, 6 insertions, 0 deletions
diff --git a/kafka/consumer/group.py b/kafka/consumer/group.py
index f521891..c107f5a 100644
--- a/kafka/consumer/group.py
+++ b/kafka/consumer/group.py
@@ -187,6 +187,11 @@ class KafkaConsumer(six.Iterator):
providing a file, only the leaf certificate will be checked against
this CRL. The CRL can only be checked with Python 3.4+ or 2.7.9+.
Default: None.
+ ssl_ciphers (str): optionally set the available ciphers for ssl
+ connections. It should be a string in the OpenSSL cipher list
+ format. If no cipher can be selected (because compile-time options
+ or other configuration forbids use of all the specified ciphers),
+ an ssl.SSLError will be raised. See ssl.SSLContext.set_ciphers
api_version (tuple): Specify which Kafka API version to use. If set to
None, the client will attempt to infer the broker version by probing
various APIs. Different versions enable different functionality.
@@ -280,6 +285,7 @@ class KafkaConsumer(six.Iterator):
'ssl_keyfile': None,
'ssl_crlfile': None,
'ssl_password': None,
+ 'ssl_ciphers': None,
'api_version': None,
'api_version_auto_timeout_ms': 2000,
'connections_max_idle_ms': 9 * 60 * 1000,