Kafka SSL握手失败问题

本文介绍了Kafka SSL握手失败问题的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我正在尝试在我的Kafka服务器上启用SSL身份验证.我正在跟踪Kafka文档中的 7.2节.

按照所有步骤进行操作，但是在调用producer.bat文件将数据发送到主题时，出现以下错误.

错误 [生产者clientId = console-producer]由于以下原因，与节点-1的连接身份验证失败:SSL握手失败(org.apache.kafka.clients.NetworkClient)

原因: java.security.cert.CertificateException:未找到与本地主机匹配的名称

我确实使用 CN = localhost 创建了证书.

解决方案

可以通过将 ssl.endpoint.identification.algorithm 设置为客户端上的空字符串来禁用服务器主机名验证./p>

I am trying to enable SSL Authentication on my Kafka server. I am following 7.2 section in the Kafka documentation.

Followed all steps, but while calling the producer.bat file to send data in to the topic i get below error.

ERROR [Producer clientId=console-producer] Connection to node -1 failed authentication due to: SSL handshake failed (org.apache.kafka.clients.NetworkClient)

Caused by: java.security.cert.CertificateException: No name matching localhost found

I did create the certificate with CN=localhost.

解决方案

The server host name verification may be disabled by setting ssl.endpoint.identification.algorithm to an empty string on the client.