Juan Olivares created KAFKA-8535:
------------------------------------
Summary: Kafka Performance Producer broken for SSL when CN is not
hostname
Key: KAFKA-8535
URL: https://issues.apache.org/jira/browse/KAFKA-8535
Project: Kafka
Issue Type: Bug
Affects Versions: 2.2.1
Reporter: Juan Olivares
We have SSL client auth enabled in our Kafka servers. Our certificates CN is
not the hostname so we cannot use the default
{{ssl.endpoint.identification.algorithm=https}}. According to the doc there's
the workaround of setting {{ssl.endpoint.identification.algorithm}} to an empty
string. It works ok for `kafka-console-producer`. However it fails for
`kafka-producer-perf-test` as the underlying class does not allow empty
properties:
https://github.com/apache/kafka/blob/trunk/tools/src/main/java/org/apache/kafka/tools/ProducerPerformance.java#L95
{code:java}
for (String prop : producerProps) {
String[] pieces = prop.split("=");
if (pieces.length != 2)
throw new IllegalArgumentException("Invalid property: " + prop);
props.put(pieces[0], pieces[1]);
}
{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
