I am connecting to a confluent kafka cluster with python clients.The broker side has mtls already set up. I am aiming to connect to the cluster with producer/consumer with the code able to support the authentication.
Our company’s official documentation is only for java. But I managed to get the these 3 files: 1. A Keystore.jsk 2. A clientTrustore.jks and 3. A certificate.p12 . Also I am able to get the password as well.
I am using the client provided by confluent but I think the kafka-python client will also be requesting similar files(Pls correct me if I am wrong about this)
# CA certificate file for verifying the broker's certificate.
ssl.ca.location=ca-cert
# Client's certificate
ssl.certificate.location=client_?????_client.pem
# Client's key
ssl.key.location=client_?????_client.key
# Key password, if any.
ssl.key.password=abcdefgh
The kafka-python one is requiring these four files:
ssl_cafile='CARoot.pem',
ssl_certfile='certificate.pem',
ssl_keyfile='key.pem',
ssl_password='<key-password>'
Not sure how could I generate the needed files to use with the python clients from the jks file so that I can connect to the cluster using python ?Btw I have openssl cmd tool and keytool in place.
If anything info missed pease let me know I can add them up.
1