Re: kafka security using ssl

2019-08-22 Thread Antony A
Hi, I was able to get the broker running if I used a CA created as shown in the example below. https://kafka.apache.org/documentation/#security_ssl The issue I am facing is when I used my internal CA. Not sure what I am missing when I am creating the certificate. Thanks. Sent from my iPhone

Re: kafka security using ssl

2019-08-22 Thread Pere Urbón Bayes
you should verify a proper chain of validation. is your private ca cert in your trust store? On Thu, 22 Aug 2019, 14:40 Antony A wrote: > Hi, > > I was able to get the broker running if I used a CA created as shown in > the example below. https://kafka.apache.org/documentation/#security_ssl > >

Re: kafka security using ssl

2019-08-22 Thread Antony A
Yes. The truststore has the CA. The keystore has the CA, PRIVATE KEY used to create the CSR and the SERVER CERT. Sent from my iPhone > On Aug 22, 2019, at 6:44 AM, Pere Urbón Bayes wrote: > > you should verify a proper chain of validation. is your private ca cert in > your trust store? > >> O

Re: kafka security using ssl

2019-08-22 Thread Pere Urbón Bayes
can you share your certificate content somehow? i should ask, is it properly signed with the ca? can you share as well the current error. -- Pere On Thu, 22 Aug 2019, 14:47 Antony A wrote: > Yes. The truststore has the CA. The keystore has the CA, PRIVATE KEY used > to create the CSR and the SE

Re: kafka security using ssl

2019-08-22 Thread Antony A
Is ExtendedKeyUsages an issue for Kafka? #7: ObjectId: 2.5.29.37 Criticality=false ExtendedKeyUsages [ serverAuth ] The certificate itself has the CA in the chain. On Thu, Aug 22, 2019 at 6:51 AM Pere Urbón Bayes wrote: > can you share your certificate content somehow? i should ask, is it

Re: kafka security using ssl

2019-08-22 Thread Pere Urbón Bayes
HI, I would add both, end of the day they do the two jobs see for more details, https://github.com/purbon/kafka-security-playbook/blob/master/tls/server.cnf#L25 Missatge de Antony A del dia dj., 22 d’ag. 2019 a les 16:50: > Is ExtendedKeyUsages an issue for Kafka? > > #7: ObjectId: 2.5.29.37 C

Re: OOM for large messages with compression?

2019-08-22 Thread l vic
Thank you, can you elaborate on "ClaimChecks"? Didn't find it with search... Thank you again, On Thu, Aug 22, 2019 at 12:49 AM Pere Urbón Bayes wrote: > Hi, > i agree with Liam, the OOM look to happen during produce time. I would > look into that. > > But with your message size, i would recom

Re: OOM for large messages with compression?

2019-08-22 Thread Pere Urbón Bayes
Hi, https://www.enterpriseintegrationpatterns.com/patterns/messaging/StoreInLibrary.html and https://docs.microsoft.com/en-us/azure/architecture/patterns/claim-check are good source of information. end of the day, my experience Apachr Kafka will perform good with max between 6 and 8mb messages

tpch-kafka loader

2019-08-22 Thread reetika agrawal
Hi, Can someone help me with tpch-kafka loader for Apache Kafka 0.10.1.x ? I found tpch-kafka loader for Apache Kafka 0.8.1 here , https://repo1.maven.org/maven2/de/softwareforge/kafka_tpch_0811/1.0/kafka_tpch_0811-1.0.sh But I wanted to use timestamp field from the tpch-kafka data which was in

Kafka Streams and broker compatibility

2019-08-22 Thread Alisson Sales
Hi all, I've just upgraded a project that was using kafka-streams 2.2.0 to 2.2.1 and found the following error at the end. I was using Kafka Broker 0.10.2.1 and after upgrading the Broker to 0.11 the error doesn't happen anymore. My question here is: where is the best place we can find the requir