DEV Community

Discussion on: What I learned about SSL Certificates when building a Secured Kafka Cluster

Collapse
 
marc__acevedo profile image
Marc Acevedo

Neil,
To implement the above, is clientAuth absolutely necessary when generating the certificates? Will kafka fail to establish an SSLHandshake with the client even if the credentials are all valid?

Best,
Marc

Collapse
 
nbuesing profile image
Neil Buesing

for SSL encryption, the setting wasn't needed. It was when I added client authentication did I see the need for it. However, I keep learning on the various nuances of certificates so I should attempt to remove as many extensions as possible. I created the broker and client certificates the same, and I am expecting that is not needed, so I should re-evaluate with the idea that the extensions between them are different.