Hi Vineet, The setup of ssl Kafka requires to make one too many steps precise correct. I have listed some below . Hope it helps https://github.com/Symantec/kafka-security-0.9
Sent from my iPhone Regards > On Jul 7, 2016, at 4:49 PM, Vineet Kumar <vineet.ku...@gmail.com> wrote: > > Hi > I followed Apache Kafka SSL instructions verbatim but my producer and > consumer both hang or error out as follows. > openssl s_client BTW does work fine with the server below yielding > certificates etc thereby confirming that the server can talk back SSL. > > > *Producer and Consumer* > ===================== > > Config changes (client-ssl.properties) > --------------- > security.protocol=SSL > > % bin/kafka-console-*consumer*.sh --bootstrap-server 192.168.1.XXX:9093 > --topic test --new-consumer --consumer.config config/client-ssl.properties > *<Hang?.....No output.....>* > > % bin/kafka-console-*producer*.sh --broker-list 192.168.1.XXX:9093 --topic > test --producer.config config/client-ssl.properties > aaaaaaaaaaaaaaaaaaaaaaaaaaaaa > > *<After more than a minute of silence...>* > > [2016-07-07 16:35:57,670] ERROR Error when sending message to topic test > with key: null, value: 29 bytes with error: > (org.apache.kafka.clients.producer.internals.ErrorLoggingCallback) > org.apache.kafka.common.errors.TimeoutException: Failed to update metadata > after 60000 ms. > > *Broker* > ====== > Config changes (server.properties) > --------------- > listeners=SSL://192.168.1.XXX:9093 > security.inter.broker.protocol=SSL > advertised.listeners=SSL://192.168.1.XXX:9093 > ssl.keystore.location=/<......>/server.keystore.jks > ssl.keystore.password=<password> > ssl.key.password=<password> > > % bin/kafka-*server*-start.sh config/server.properties > [2016-07-07 16:14:00,805] INFO Registered broker 0 at path /brokers/ids/0 > with addresses: *SSL -> EndPoint(192.168.1.XXX,9093,SSL)* > (kafka.utils.ZkUtils) > [2016-07-07 16:14:00,820] INFO New leader is 0 > (kafka.server.ZookeeperLeaderElector$LeaderChangeListener) > [2016-07-07 16:14:00,825] INFO Kafka version : 0.10.0.0 > (org.apache.kafka.common.utils.AppInfoParser) > [2016-07-07 16:14:00,825] INFO Kafka commitId : b8642491e78c5a13 > (org.apache.kafka.common.utils.AppInfoParser) > [2016-07-07 16:14:00,827] INFO [Kafka Server 0], started > (kafka.server.KafkaServer) > > *Zookeeper* > ========= > Config changes > --------------- > Nothing > > % bin/zookeeper-server-start.sh config/zookeeper.properties > .... > .... > [2016-07-07 16:13:18,002] INFO binding to port 0.0.0.0/0.0.0.0:2181 > (org.apache.zookeeper.server.NIOServerCnxnFactory) > .... > .... > [2016-07-07 16:14:00,131] INFO Accepted socket connection from / > 127.0.0.1:41188 (org.apache.zookeeper.server.NIOServerCnxnFactory) > [2016-07-07 16:14:00,189] INFO Client attempting to establish new session > at /127.0.0.1:41188 (org.apache.zookeeper.server.ZooKeeperServer) > [2016-07-07 16:14:00,199] INFO Established session 0x155c7a306dc0000 with > negotiated timeout 6000 for client /127.0.0.1:41188 > (org.apache.zookeeper.server.ZooKeeperServer) > [2016-07-07 16:14:00,652] INFO Got user-level KeeperException when > processing sessionid:0x155c7a306dc0000 type:delete cxid:0x22 zxid:0xd6 > txntype:-1 reqpath:n/a Error Path:/admin/preferred_replica_election > Error:KeeperErrorCode = NoNode for /admin/preferred_replica_election > (org.apache.zookeeper.server.PrepRequestProcessor) > [2016-07-07 16:14:00,778] INFO Got user-level KeeperException when > processing sessionid:0x155c7a306dc0000 type:create cxid:0x29 zxid:0xd7 > txntype:-1 reqpath:n/a Error Path:/brokers Error:KeeperErrorCode = > NodeExists for /brokers (org.apache.zookeeper.server.PrepRequestProcessor) > [2016-07-07 16:14:00,778] INFO Got user-level KeeperException when > processing sessionid:0x155c7a306dc0000 type:create cxid:0x2a zxid:0xd8 > txntype:-1 reqpath:n/a Error Path:/brokers/ids Error:KeeperErrorCode = > NodeExists for /brokers/ids > (org.apache.zookeeper.server.PrepRequestProcessor)
