@Override
    public void validateReconfiguration(Map<String, ?> newConfigs) throws ConfigException {
        try {
            createNewSslEngineFactory(newConfigs);
        } catch (IllegalStateException e) {
            throw new ConfigException("SSL reconfiguration failed due to " + e);
        }
    }
Create an SslFactory.

@param connectionMode                        Whether to use client or server mode.
@param clientAuthConfigOverride              The value to override ssl.client.auth with, or null
                                             if we don't want to override it.
@param keystoreVerifiableUsingTruststore     True if we should require the keystore to be verifiable
                                             using the truststore.
clients/src/main/java/org/apache/kafka/common/security/ssl/SslFactory.java