...

security.provider.class.namesclasses=com.security.ProviderClass,com.security.ProviderClass2

...

We add new config parameter in KafkaConfig named “security.provider.class.names”. The value of “security.provider.class.names” is expected to be a comma separated string representing the providers' full classname. This provider classes will be added to the JVM through Security.addProvider api. Security class can be used to programmatically add the provider classes to the JVM. The provider classes will be added at the starting position in the list of providers and in the order they are passed. So any algorithm implemented in the earlier classes will replace algorithm implementations with the same name in following providers.

for (String provider : givenProvidersListReversed) {
   // Adds at position 0
   Security.addProvider(configuredProvider)((Provider) Class.forName(provider).newInstance());
}

Compatibility, Deprecation, and Migration Plan

...