Mutual-TLS Dynamic config update not working

2021-06-03 Thread Anjali Sharma
Dear All, When trying to configure mtls without restarting the brokers it is not working. For mutualTLS "ssl.client.auth" should be set to "required". So, if we are trying to do the dynamic update using the below command *sh /opt/kafka/bin/kafka-configs.sh --bootstrap-server localhost:28104 --ent

Kafka 2 way authentication not working

2021-06-03 Thread Anjali Sharma
Dear All, When trying to configure mtls without restarting the brokers it is not working. For mutualTLS "ssl.client.auth" should be set to "required". So, if we are trying to do the dynamic update using the below command *sh /opt/kafka/bin/kafka-configs.sh --bootstrap-server localhost:28104 --ent

Re: Kafka 2 way authentication not working

2021-06-03 Thread Anjali Sharma
one > Valid Values: [required, requested, none] > Importance: medium > Update Mode: per-broker > > בתאריך יום ו׳, 4 ביוני 2021, 08:30, מאת Anjali Sharma ‏< > sharma.anjali.2...@gmail.com>: > > > Dear All, > > > > When trying to configure mtls without restar

Re: Kafka 2 way authentication not working

2021-06-04 Thread Anjali Sharma
, 09:24, מאת Anjali Sharma ‏< > sharma.anjali.2...@gmail.com>: > > > Hi Ran, > > > > Thank you so much for the help, but had already gone through the > > documentation, but despite doing the same thing it is not working , we > are > > not getting any clie

Re: Kafka 2 way authentication not working

2021-06-04 Thread Anjali Sharma
only understanding we > > need is if specfic listener config is dynamic changeable and when it take > > place? New connections? Do all your client fully discconect and reconnect > > to that listener? > > > > בתאריך יום ו׳, 4 ביוני 2021, 10:25, מאת Anjali Sharma ‏<

Re: Kafka 2 way authentication not working

2021-06-04 Thread Anjali Sharma
checking... is there a way for you to check if this behavior > is > > for "already connected clients" and what check only what happens to "new > > connections" > > > > בתאריך יום ו׳, 4 ביוני 2021, 10:47, מאת Anjali Sharma ‏< > > sharma.anjali.2.

Re: Kafka 2 way authentication not working

2021-06-04 Thread Anjali Sharma
d - but I'll have to look into the kafka code - not going to that > at the moment. > בתאריך יום ו׳, 4 ביוני 2021, 11:27, מאת Anjali Sharma ‏< > sharma.anjali.2...@gmail.com>: > > > But according to the documentation provided by you we can configure > >

Mtls not working

2021-06-23 Thread Anjali Sharma
Hi All, While trying for mtls ssl.client.aut=required, From Client side we are seeing some junk certificates which we have not imported on the client side? Please help with this? Thanks & Regards Anjali

Fwd: Mtls not working

2021-06-23 Thread Anjali Sharma
Hi All, While trying for mtls ssl.client.aut=required, From Client side we are seeing some junk certificates which we have not imported on the client side? Please help with this? Thanks & Regards Anjali

Re: Mtls not working

2021-06-23 Thread Anjali Sharma
entInc>[image: LinkedIn] > <https://www.linkedin.com/company/confluent/>[image: Slack] > <https://slackpass.io/confluentcommunity>[image: YouTube] > <https://youtube.com/confluent> > [image: Kafka Summit] <https://www.kafka-summit.org/> > > > On Thu, Jun

Re: Mtls not working

2021-06-24 Thread Anjali Sharma
nkedin.com/company/confluent/>[image: Slack] > <https://slackpass.io/confluentcommunity>[image: YouTube] > <https://youtube.com/confluent> > [image: Kafka Summit] <https://www.kafka-summit.org/> > > > On Thu, Jun 24, 2021 at 11:38 AM Anjali Sharma < > sharm

Re: Mtls not working

2021-06-24 Thread Anjali Sharma
ign=ch.email-signature_type.community_content.blog > >[image: > Twitter] <https://twitter.com/ConfluentInc>[image: LinkedIn] > <https://www.linkedin.com/company/confluent/>[image: Slack] > <https://slackpass.io/confluentcommunity>[image: YouTube] &

Re: Mtls not working

2021-06-24 Thread Anjali Sharma
> Wu Shilin > Solution Architect > +6581007012 > Follow us: [image: Blog] > < > https://www.confluent.io/blog?utm_source=footer&utm_medium=email&utm_campaign=ch.email-signature_type.community_content.blog > >[image: > Twitter] <https://twitter.com/ConfluentInc&g

Re: Mtls not working

2021-06-24 Thread Anjali Sharma
email-signature_type.community_content.blog > >[image: > Twitter] <https://twitter.com/ConfluentInc>[image: LinkedIn] > <https://www.linkedin.com/company/confluent/>[image: Slack] > <https://slackpass.io/confluentcommunity>[image: YouTube] > <https://youtube.com/conflue

Re: Mtls not working

2021-06-24 Thread Anjali Sharma
ך יום ה׳, 24 ביוני 2021, 19:18, מאת Anjali Sharma ‏< > sharma.anjali.2...@gmail.com>: > > > openssl s_client -connect 10.54.65.99:28105 > > socket: Bad file descriptor > > connect:errno=9 > > > > This is the output we are getting > > > > > >

Certificate request not coming mtls

2021-06-24 Thread Anjali Sharma
Can you please help with this? While trying for mtls ssl.client.aut=required, server side in certificate request the DN are for some junk certificates which we have not deployed on server

Subject: Certificate request not coming mtls

2021-06-24 Thread Anjali Sharma
Can you please help with this? While trying for mtls ssl.client.aut=required, server side in certificate request the DN are for some junk certificates which we have not deployed on server ReplyForward

Certificate request not coming mtls

2021-06-25 Thread Anjali Sharma
Hii All, Can you please help with this? While trying for mtls ssl.client.aut=required, server side in certificate request the DN are for some junk certificates which we have not deployed on server

Re: Certificate request not coming mtls

2021-06-25 Thread Anjali Sharma
’ve tried ? > 2. What config changes have you made? > 3. What do you expect to see? > > On Fri, 25 Jun 2021 at 09:22, Anjali Sharma > wrote: > > > Hii All, > > > > > > Can you please help with this? > > > > While trying for mtls ssl.client.aut=re

Re: Certificate request not coming mtls

2021-06-25 Thread Anjali Sharma
ך יום ו׳, 25 ביוני 2021, 11:29, מאת Anjali Sharma ‏< > sharma.anjali.2...@gmail.com>: > > > 1.Was trying for mtls by setting SSL.client.auth=required > > 2. Had imported the trustore, keystore and everything on client side > > 3. Need to consume messages on client wh