Hello All,

I am trying to set up Kafka(v3.6.1) to use mTLS
authentication/authorization for *inter broker* communication but currently
server.properties doesn't allow me to set a key store that contains client
private key/certificate. I did try supplying a keystore to Kafka that
contains both TLS server and client private key entries but that doesn't
seem to work.

Essentially what I am looking for is:
```java
listeners=BROKER://:21500,CONTROLLER://:21501
advertised.listeners=BROKER://localhost:21500
listener.security.protocol.map=BROKER:SSL,CONTROLLER:SSL

security.protocol=SSL
ssl.client.auth=required
ssl.enabled.protocols=TLSv1.2,TLSv1.3

ssl.keystore.type=JKS
ssl.keystore.password=changeit
ssl.keystore.location=/tmp/kafka/pki/server.jks

############ Is something like this following possible?
<--------------------
ssl.client.keystore.type=JKS
ssl.client.keystore.password=changeit
ssl.keystore.location=/tmp/kafka/pki/client.jks
```

I am able to configure both the producer and consumer to use mTLS
authentication to talk to the Kafka cluster but for inter broker
communication I am not able to supply the broker TLS client certificates in
the properties. Any help on this is appreciated! Thank you in advance.

Regards,
Krishna V

Reply via email to