尝试使用双向ssl建立kafka,但出现错误

umuewwlo  于 2021-06-05  发布在  Kafka
关注(0)|答案(0)|浏览(348)

我正在尝试用kafka(版本2.4.0)建立双向tls身份验证。
my server.properties配置:

listeners=SSL://kafka1:9092
advertised.listeners=SSL://<public_ip>:9092
ssl.keystore.location=path/server.keystore.jks
ssl.keystore.password=pass
ssl.truststore.location=path/server.truststore.jks
ssl.truststore.password=pass
ssl.endpoint.identification.algorithm=HTTPS
security.inter.broker.protocol=SSL

client.properties属性:

bootstrap.servers=kafka1:9092
security.protocol=SSL
ssl.keystore.location=path/client.keystore.jks
ssl.keystore.password=pass
ssl.truststore.location = path/client.truststore.jks
ssl.truststore.password=pass

kafkaserver和zookeeper已打开。但当我尝试创建主题时: kafka-topics.sh --bootstrap-server kafka1:9092 --create --replication-factor 1 --partitions 1 --topic sometopic --command-config config/client.properties 获取错误:

org.apache.kafka.common.errors.SslAuthenticationException: SSL handshake failed
Caused by: javax.net.ssl.SSLHandshakeException: No name matching kafka1 found

我的证书连接到kafka1名称,并且有kafka1到本地ip的Map。你以前见过这样的错误吗?

暂无答案!

目前还没有任何答案,快来回答吧!

相关问题