[GitHub] [pulsar] eronrunner created a discussion: Issue - Failed to enable ssl with JKS

Thu, 11 Aug 2022 01:54:22 -0700 


GitHub user eronrunner created a discussion: Issue - Failed to enable ssl with 
JKS

I install pulsar by helm chart and try to add the properties

  brokerServicePortTls: "{{.Values.broker.ports.pulsarssl}}"
  webServicePortTls: "{{.Values.broker.ports.https}}"
  tlsEnabled: "true"
  # TLS Settings
  tlsCertificateFilePath: "/pulsar/certs/manager.crt"
  tlsKeyFilePath: "/pulsar/certs/manager.key"
  tlsTrustCertsFilePath: "/pulsar/certs/ca.crt"
  # tlsAllowInsecureConnection: "false"
  tlsProtocols: "TLSv1.2,TLSv1.1"

## Enable KeyStore type
  tlsEnabledWithKeyStore: "true"
  requireTrustedClientCertOnConnect: "true"
  ## key store
  tlsKeyStoreType: JKS
  tlsKeyStore: "{{.Values.tlsKeyStore.tlsKeyStore}}"
  tlsKeyStorePassword: "{{.Values.tlsKeyStore.tlsKeyStorePassword}}"
  ## trust store
  tlsTrustStoreType: JKS
  tlsTrustStore: "{{.Values.tlsKeyStore.tlsTrustStore}}"
  tlsTrustStorePassword: "{{.Values.tlsKeyStore.tlsTrustStorePassword}}"
  ## internal client/admin-client config
  brokerClientTlsEnabled: "{{.Values.tlsKeyStore.brokerClientTlsEnabled}}"
  brokerClientTlsEnabledWithKeyStore: 
"{{.Values.tlsKeyStore.brokerClientTlsEnabledWithKeyStore}}"
  brokerClientTlsTrustStoreType: JKS
  brokerClientTlsTrustStore: "{{.Values.tlsKeyStore.brokerClientTlsTrustStore}}"
  brokerClientTlsTrustStorePassword: 
"{{.Values.tlsKeyStore.brokerClientTlsTrustStorePassword}}"

![image](https://user-images.githubusercontent.com/35225206/184097308-9fcc8dec-c289-432f-91ea-5a442f597b23.png)
![image](https://user-images.githubusercontent.com/35225206/184097915-b1c54f02-e378-4c45-8e8d-5e27800bafdb.png)
I also tried some ways by disabling  the HTTP port and non-ssl service port, 
but got the same things.
Please help!
Thank you

GitHub link: https://github.com/apache/pulsar/discussions/17065

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]

Reply via email to