Kafka

1.Was trying for mtls by setting SSL.client.auth=required 2. Had imported the trustore, keystore and everything on client side 3. Need to consume messages on client which we are not able to see Can you help with this? On Fri, Jun 25, 2021, 13:54 M. Manna < manmedia@gmail.com > wrote: > 1. What is it that you've tried ? > 2. What config changes have you made? > 3. What do you expect to see? > > On Fri, 25 Jun 2021 at 09:22, Anjali Sharma < sharma.anjali.2699@gmail.com > > wrote: > > > Hii All, > > > > > > Can you please help with this? > > > > While trying for mtls ssl.client.aut=required, server side in certificate > > request the DN are for some junk certificates which we have not deployed > on > > server > > >

1. What is it that you've tried ? 2. What config changes have you made? 3. What do you expect to see? On Fri, 25 Jun 2021 at 09:22, Anjali Sharma < sharma.anjali.2699@gmail.com > wrote: > Hii All, > > > Can you please help with this? > > While trying for mtls ssl.client.aut=required, server side in certificate > request the DN are for some junk certificates which we have not deployed on > server >

Hii All, Can you please help with this? While trying for mtls ssl.client.aut=required, server side in certificate request the DN are for some junk certificates which we have not deployed on server

Hi Team , When ssl.client.auth=required is set , Srver is sending Certificate request with DN with junk certificates to client . Server has to send what certificates we have deployed since its sending junk certificate handshake is failing. Attaching the screenshot of junk certificates sent in Certificate request. Are these default certificate sent by kafka ?? I have attached pcap also for the same Please help in resolving issue. Regards, Meghna

Can you please help with this? While trying for mtls ssl.client.aut=required, server side in certificate request the DN are for some junk certificates which we have not deployed on server ReplyForward

Can you please help with this? While trying for mtls ssl.client.aut=required, server side in certificate request the DN are for some junk certificates which we have not deployed on server

Can you share your listeners propeties from server.properties בתאריך יום ה׳, 24 ביוני 2021, 19:49, מאת Anjali Sharma ‏< sharma.anjali.2699@gmail.com >: > But in the pcap I am able to see that it is taking some junk certificates > from client side > > On Thu, Jun 24, 2021, 21:58 Ran Lupovich < ranlupovich@gmail.com > wrote: > > > Make sure that the date and time on the server is correct (The wrong time > > will cause the SSL certificate connection to fail). > > > > בתאריך יום ה׳, 24 ביוני 2021, 19:18, מאת Anjali Sharma ‏< > > sharma.anjali.2699@gmail.com >: > > > > > openssl s_client -connect 10.54.65.99:28105 > > > socket: Bad file descriptor > > > connect:errno=9 > > > > > > This is the output we are getting > > > > > > > > > On Thu, Jun 24, 2021 at 6:04 PM Shilin Wu <shwu@confluent.io.invalid> > > > wr...