Hi, I'm trying to start kafka services using SASL_SSL. I am using SCRAM as the 
authentication method. But I am getting error. Error details are attached.

org.apache.kafka.common.KafkaException: 
org.apache.kafka.common.config.ConfigException: Invalid value 
javax.net.ssl.SSLHandshakeException: No available authentication scheme for 
configuration A client SSLEngine created with the provided settings can't 
connect to a server SSLEngine created with those settings.

Server.properties:


listeners=SASL_SSL://hostname:9092

advertised.listeners=SASL_SSL://hostname:9092

ssl.trustStore.locations=/home/kafka/kafka/ssl/kafka.truststore.jks

ssl.trustStore.password=password

ssl.keyStore.location=/home/kafka/kafka/ssl/kafka.keystore.jks

ssl.keyStore.password=password

ssl.key.password=password

security.inter.broker.protocol=SASL_SSL

ssl.client.auth=required

sasl.enabled.mechanisms=SCRAM-SHA-512

sasl.mechanism.inter.broker.protocol=SCRAM-SHA-512

listener.name.sasl_ssl.scram-sha-512.sasl.jaas.config=org.apache.kafka.common.security.scram.ScramLoginModule
 required username="admin" password="admin-pass";

super.users=User:admin

ssl.endpoint.identification.algorithm=

# properties for authorization

authorizer.class.name=kafka.security.authorizer.AclAuthorizer

zookeeper.set.acl=false







NOT: My certificate using the RSA algorithm.

Java version: openjdk11

Kafka version: 3.2.3

Operating system: RHEL 8.7



waiting for your feedback. Thanks.



Best regards.

[cid:GTech_Logo_773799ce-f033-4292-9d8a-61c63b5d3010.png]
 [cid:Facebook_1716081f-5f23-49a4-8cca-6a83c005b84b.png] 
<https://www.facebook.com/GTechTR/> 
[cid:Instagram_b9d64fee-d001-4c02-b2a1-cb0fe6a0b953.png] 
<https://www.instagram.com/gtech_global/> 
[cid:Linkedin_fe95dcbd-9aba-4c96-bdb7-3bf11191a3e4.png] 
<https://www.linkedin.com/company/630751/> 
[cid:Twitter_afe9591b-a535-45f8-9028-c1f238fb549a.png] 
<https://twitter.com/gtechtr> 
[cid:Youtube_23bede61-40cf-48cb-b584-0e559c343cd4.png] 
<https://www.youtube.com/channel/UCvZf3Imch3pLnJ2nC1Rv79A>       Mehmet Can 
YILMAZ
Big Data & Analytics Consultant
mehmet.yil...@gtech.com.tr
Mobile:         HQ Phone:       +90 212 285 99 75       HQ Fax: +90 212 285 99 
78
HQ Address:     Maslak Mahallesi Dereboyu 2 Caddesi No: 6/4 Maslak 34398 
Sar?yer, Istanbul


[cid:GTechMailBanner_1fc9be90-e931-419b-a9d6-0ad7ac71513c.png]

Bu mesaj ve ekleri, mesajda g?nderildi?i belirtilen ki?i/ki?ilere ?zeldir ve 
gizlidir. Bu mesaj?n muhatab? olmaman?za ra?men taraf?n?za ula?m?? olmas? 
halinde mesaj i?eri?inin gizlili?i ve bu gizlilik y?k?ml?l???ne uyulmas? 
zorunlulu?u taraf?n?z i?in de s?z konusudur. Mesaj ve eklerinde yer alan 
bilgilerin do?rulu?u ve g?ncelli?i konusunda g?nderenin ya da G Teknoloji 
Bili?im San. Tic. A. ?.'nin herhangi bir sorumlulu?u bulunmamaktadir. G 
Teknoloji Bili?im San. Tic. A. ?. mesaj?n ve bilgilerinin size de?i?ikli?e 
u?rayarak veya ge? ula?mas?ndan, b?t?nl???n?n ve gizlili?inin korunamamas?ndan, 
vir?s i?ermesinden ve bilgisayar sisteminize verebilece?i herhangi bir zarardan 
sorumlu tutulamaz. This message and attachments are confidential and intended 
solely for the individual(s) stated in this message. If you received this 
message although you are not the addressee, you are responsible to keep the 
message confidential. The sender has no responsibility for the accuracy or 
correctness of the information in the message and its attachments. G Teknoloji 
Bili?im San. Tic. A. ?. shall have no liability for any changes or late 
receiving, loss of integrity and confidentiality, viruses and any damages 
caused in anyway to your computer system.

===============================================================
This message has been analyzed by Deep Discovery Email Inspector.

Reply via email to