Kafka SSL 连接错误

Question

我在从客户端连接到包含基于 SSL 的身份验证的服务器端进行生产时收到以下警告：

[2016-03-10 07:09:13,018] WARN The configuration ssl.keystore.location = /etc/pki/tls/certs/keystore-hpfs.jks was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2016-03-10 07:09:13,019] WARN The configuration ssl.keystore.password = 1qazxsw2 was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2016-03-10 07:09:13,019] WARN The configuration ssl.key.password = 1qazxsw2 was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2016-03-10 07:09:13,019] WARN The configuration ssl.truststore.type = JKS was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2016-03-10 07:09:13,019] WARN The configuration ecurity.protocol = SSL was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2016-03-10 07:09:13,019] WARN The configuration ssl.keystore.type = JKS was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2016-03-10 07:09:13,019] WARN The configuration ssl.enabled.protocols = TLSv1.2,TLSv1.1,TLSv1 was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)

所以我无法产生任何低于错误的消息：

ERROR 向主题测试发送消息时出错，键为空，值：2 个字节，错误：60000 毫秒后更新元数据失败。 (org.apache.kafka.clients.producer.internals.ErrorLoggingCallback)

Answer 1

当 kafka 记录 SSL Handshake 错误时，生产者遇到了同样的问题。 结果我忘了将security.protocol=SSL 添加到我的生产者属性中。

Answer 2

在您的 server.properties 中，ssl.keystore.type 和 ssl.truststore.type 是可选属性， 我可以看到您的配置中缺少 ssl.truststore.location，请确保添加它们。

listeners=PLAINTEXT://host.name:port,SSL://host.name:port

确保使用您为 SSL 连接提供的端口。

ssl.client.auth=required //for two way SSL

通过设置禁用主机名验证：

ssl.endpoint.identification.algorithm=