Hi, Harsha, I appreciate you very much for your response and the bash script you provided to generate the keystores works for me and solve the problem. I was wondering it was caused by the cipher suite differences between openjdk and oracle-jdk, anyway it is not that case. Finally I got it worked under both openjdk and oracle-jdk.
Thanks, Samuel On Tue, Aug 25, 2015 at 9:55 PM, Sriharsha Chintalapani < harsh...@fastmail.fm> wrote: > Hi, > Turns out to be a bug in the instructions in the wiki . I fixed it > can you please retry generating the truststore and keystore > > https://cwiki.apache.org/confluence/display/KAFKA/Deploying+SSL+for+Kafka > . > > checkout this section "All of the above steps in a bash script” to > generate the keystores. > Thanks, > Harsha > > > On August 25, 2015 at 8:56:24 PM, Sriharsha Chintalapani (ka...@harsha.io) > wrote: > > Hi Xiang, > Did you try following the instructions here > https://cwiki.apache.org/confluence/display/KAFKA/Deploying+SSL+for+Kafka > . > Whats the output of openssl s_client and which version of java and OS are > you using. > > Thanks, > Harsha > > > On August 25, 2015 at 8:42:18 PM, Xiang Zhou (Samuel) (zhou...@gmail.com) > wrote: > > no cipher suites in common > >