You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/09/27 09:51:43 UTC

[GitHub] [pulsar] Anonymitaet commented on a diff in pull request #17808: [improve][doc] Improve TLS encryption

Anonymitaet commented on code in PR #17808:
URL: https://github.com/apache/pulsar/pull/17808#discussion_r981024270


##########
site2/docs/security-encryption.md:
##########
@@ -35,7 +35,327 @@ If produced messages are consumed across application boundaries, you need to ens
 
 ## Get started
 
-Pulsar encryption allows applications to encrypt messages on the producer side and decrypt messages on the consumer side. See [cookbook](cookbooks-encryption.md) for detailed instructions.
+## Prerequisites
+
+* Pulsar Java/Python/C++/Node.js client 2.7.1 or later versions.
+* Pulsar Go client 0.6.0 or later versions.
+
+## Configure end-to-end encryption
+
+1. Create both public and private key pairs.
+   * ECDSA(for Java and Go clients)
+     ```shell
+     openssl ecparam -name secp521r1 -genkey -param_enc explicit -out test_ecdsa_privkey.pem
+     openssl ec -in test_ecdsa_privkey.pem -pubout -outform pem -out test_ecdsa_pubkey.pem
+     ```
+
+   * RSA (for Python, C++ and Node.js clients)
+     ```shell
+     openssl genrsa -out test_rsa_privkey.pem 2048
+     openssl rsa -in test_rsa_privkey.pem -pubout -outform pkcs8 -out test_rsa_pubkey.pem

Review Comment:
   Can we consider using "multiple tabs" like this?
   
   <img width="1171" alt="image" src="https://user-images.githubusercontent.com/50226895/192494366-18e6d5a9-2179-49c8-a5c0-5f581884849c.png">
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org