Skip to content

Latest commit

 

History

History
29 lines (24 loc) · 1.1 KB

README.md

File metadata and controls

29 lines (24 loc) · 1.1 KB
Raw

Enabling SSL for Kafka Clients

It is ensured that the necessary certificates are created to encrypt the traffic between Kafka Brokers and clients.

Creating Certificates

  • chmod +x creating_certificates_for_kafka.sh
  • ./creating_certificates_for_kafka.sh

NOTE: Before running the script, the SUBJECT information in it must be updated.



Kafka Configs

listeners=PLAINTEXT://localhost:9092,SSL://localhost:9093
security.inter.broker.protocol=PLAINTEXT
ssl.client.auth=none
ssl.key.password=PASSWORD
ssl.keystore.location=/etc/kafka/certs/kafka.server.keystore.jks
ssl.keystore.password= PASSWORD
ssl.truststore.location=/etc/kafka/certs/kafka.server.truststore.jks
ssl.truststore.password= PASSWORD
port=9092
ssl.enabled.protocols=TLSv1.2
ssl.endpoint.identification.algorithm=HTTPS
ssl.keystore.type=JKS
ssl.truststore.type=JKS

NOTE: Instead of PASSWORD information, the password entered in the first step of the certificate creation process must be written.