You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@kafka.apache.org by Erik Parienty <Er...@clicktale.com> on 2016/08/25 12:38:58 UTC
kafka-mirror-maker.sh ssl
As I understand mirror-maker support consumer ssl
I tried to set it but I get WARN Property security.protocol is not valid (kafka.utils.VerifiableProperties)
And its connecting without ssl
Re: kafka-mirror-maker.sh ssl
Posted by Manikumar Reddy <ma...@gmail.com>.
enable debug logs and check for any exceptions/error messages
log4j file : kafka/config/tools-log4j.properties
On Thu, Aug 25, 2016 at 6:41 PM, Erik Parienty <Er...@clicktale.com>
wrote:
> Thanks a lot but now I get nothing :-)
>
> The command I am running:
> ./kafka-mirror-maker.sh --new.consumer --consumer.config
> consumer_ssl.properties --producer.config producer_ssl.properties
> --whitelist =".*"
>
>
> consumer_ssl.properties:
>
> bootstrap.servers=XXXXXX:9093
> group.id=securing-kafka-group
> security.protocol=SSL
> ssl.truststore.location=/opt/kafka_2.11-0.10.0.0/config/
> client.truststore.jks
> ssl.truststore.password=XXXXX
> ssl.keystore.location=/opt/kafka_2.11-0.10.0.0/config/client.keystore.jks
> ssl.keystore.password=XXXX
> ssl.key.password=XXXXX
>
>
> producer_ssl.properties:
>
> bootstrap.servers= XXXXXX:9092
>
>
> (I have tested producer and consumer over ssl and its working)
>
>
> -----Original Message-----
> From: Manikumar Reddy [mailto:manikumar.reddy@gmail.com]
> Sent: Thursday, August 25, 2016 3:45 PM
> To: users@kafka.apache.org
> Subject: Re: kafka-mirror-maker.sh ssl
>
> Security is supported in new Consumer API. use "--new.consumer" option to
> use enable new consumer inside MirrorMaker.
>
> On Thu, Aug 25, 2016 at 6:08 PM, Erik Parienty <
> Erik.Parienty@clicktale.com>
> wrote:
>
> > As I understand mirror-maker support consumer ssl I tried to set it
> > but I get WARN Property security.protocol is not valid
> > (kafka.utils.VerifiableProperties)
> > And its connecting without ssl
> >
> >
> >
>
RE: kafka-mirror-maker.sh ssl
Posted by Erik Parienty <Er...@clicktale.com>.
Thanks a lot but now I get nothing :-)
The command I am running:
./kafka-mirror-maker.sh --new.consumer --consumer.config consumer_ssl.properties --producer.config producer_ssl.properties --whitelist =".*"
consumer_ssl.properties:
bootstrap.servers=XXXXXX:9093
group.id=securing-kafka-group
security.protocol=SSL
ssl.truststore.location=/opt/kafka_2.11-0.10.0.0/config/client.truststore.jks
ssl.truststore.password=XXXXX
ssl.keystore.location=/opt/kafka_2.11-0.10.0.0/config/client.keystore.jks
ssl.keystore.password=XXXX
ssl.key.password=XXXXX
producer_ssl.properties:
bootstrap.servers= XXXXXX:9092
(I have tested producer and consumer over ssl and its working)
-----Original Message-----
From: Manikumar Reddy [mailto:manikumar.reddy@gmail.com]
Sent: Thursday, August 25, 2016 3:45 PM
To: users@kafka.apache.org
Subject: Re: kafka-mirror-maker.sh ssl
Security is supported in new Consumer API. use "--new.consumer" option to use enable new consumer inside MirrorMaker.
On Thu, Aug 25, 2016 at 6:08 PM, Erik Parienty <Er...@clicktale.com>
wrote:
> As I understand mirror-maker support consumer ssl I tried to set it
> but I get WARN Property security.protocol is not valid
> (kafka.utils.VerifiableProperties)
> And its connecting without ssl
>
>
>
Re: kafka-mirror-maker.sh ssl
Posted by Manikumar Reddy <ma...@gmail.com>.
Security is supported in new Consumer API. use "--new.consumer" option to
use enable new consumer inside MirrorMaker.
On Thu, Aug 25, 2016 at 6:08 PM, Erik Parienty <Er...@clicktale.com>
wrote:
> As I understand mirror-maker support consumer ssl
> I tried to set it but I get WARN Property security.protocol is not valid
> (kafka.utils.VerifiableProperties)
> And its connecting without ssl
>
>
>