Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there a way to authenticate with SSL certs? #99

Open
alekseyp opened this issue Aug 8, 2020 · 8 comments
Open

Is there a way to authenticate with SSL certs? #99

alekseyp opened this issue Aug 8, 2020 · 8 comments

Comments

@alekseyp
Copy link

alekseyp commented Aug 8, 2020

Hello,

I've tried to do it by installing certs in OS, but couldn't authenticate against my Kafka with SSL auth enabled.

https://docs.confluent.io/current/kafka/authentication_ssl.html#clients

Has anyone tried to do it or client just doesn't support it yet?

@doujiang24
Copy link
Owner

you can configure the trusted certificate:
https://github.com/openresty/lua-nginx-module#lua_ssl_trusted_certificate

@alpha2z
Copy link

alpha2z commented Aug 15, 2020

looks like resty-kafka plugin cant use authenticate-kafka-server
hope writer answer soon.

@doujiang24
Copy link
Owner

@alpha2z do you mean the client certificate authentication?
yes, it's not supported yet.

@nevmerzhitsky
Copy link

nevmerzhitsky commented Aug 15, 2020

@alpha2z do you mean the client certificate authentication?
yes, it's not supported yet.

What are the plans to support SASL?

@doujiang24
Copy link
Owner

We planned to implement the SASL feature, maybe ok in the next few weeks.
PRs are still welcome :)

@alekseyp
Copy link
Author

alekseyp commented Sep 1, 2020

Would love to see SASL support!

@danaspice
Copy link

Just wondering is SASL has been implemented yet?

@Hubbitus
Copy link

Hubbitus commented Jun 1, 2023

Hello.
Sorry, do you plan to implement SSL client authentication on kafka with certificate and key (or truststore/keystore)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants