Are you sure broker side ssl configs are properly set. One quick way to
test is to use openssl to connect to the broker
openssl s_client -debug -connect localhost:9093 -tls1
make sure you change the port where the broker is running the SSL.

More details are here
http://kafka.apache.org/documentation.html#security_ssl

-Harsha

On Thu, Mar 10, 2016, at 12:41 AM, Ranjan Baral wrote:
> i getting below warning while doing produce from client side which is
> connecting to server side which contains SSL based authentication.
> 
> *[2016-03-10 07:09:13,018] WARN The configuration ssl.keystore.location =
> /etc/pki/tls/certs/keystore-hpfs.jks was supplied but isn't a known
> config.
> (org.apache.kafka.clients.producer.ProducerConfig) [2016-03-10
> 07:09:13,019] WARN The configuration ssl.keystore.password = 1qazxsw2 was
> supplied but isn't a known config.
> (org.apache.kafka.clients.producer.ProducerConfig) [2016-03-10
> 07:09:13,019] WARN The configuration ssl.key.password = 1qazxsw2 was
> supplied but isn't a known config.
> (org.apache.kafka.clients.producer.ProducerConfig) [2016-03-10
> 07:09:13,019] WARN The configuration ssl.truststore.type = JKS was
> supplied
> but isn't a known config.
> (org.apache.kafka.clients.producer.ProducerConfig) [2016-03-10
> 07:09:13,019] WARN The configuration ecurity.protocol = SSL was supplied
> but isn't a known config.
> (org.apache.kafka.clients.producer.ProducerConfig) [2016-03-10
> 07:09:13,019] WARN The configuration ssl.keystore.type = JKS was supplied
> but isn't a known config.
> (org.apache.kafka.clients.producer.ProducerConfig) [2016-03-10
> 07:09:13,019] WA*RN The configuration ssl.enabled.protocols =
> TLSv1.2,TLSv1.1,TLSv1 was supplied but isn't a known config.
> (org.apache.kafka.clients.producer.ProducerConfig)****
> 
> So i am not able to produce any message getting below error
> 
> *ERROR Error when sending message to topic test with key: null, value: 2
> bytes with error: Failed to update metadata after 60000 ms.
> (org.apache.kafka.clients.producer.internals.ErrorLoggingCallback)*
> 
> 
> -- 
> Thanks & Regards
> Ranjan Kumar Baral

Reply via email to