Kafka SSL 握手失败问题

本文介绍了Kafka SSL 握手失败问题的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我正在尝试在我的 Kafka 服务器上启用 SSL 身份验证.我正在关注 Kafka 文档中的 7.2 部分.

I am trying to enable SSL Authentication on my Kafka server. I am following 7.2 section in the Kafka documentation.

按照所有步骤操作，但是在调用 producer.bat 文件将数据发送到主题时，我收到以下错误.

Followed all steps, but while calling the producer.bat file to send data in to the topic i get below error.

错误 [Producer clientId=console-producer] 连接到节点 -1 的身份验证失败，原因是:SSL 握手失败 (org.apache.kafka.clients.NetworkClient)

ERROR [Producer clientId=console-producer] Connection to node -1 failed authentication due to: SSL handshake failed (org.apache.kafka.clients.NetworkClient)

原因: java.security.cert.CertificateException:找不到与本地主机匹配的名称

Caused by: java.security.cert.CertificateException: No name matching localhost found

我确实使用 CN=localhost 创建了证书.

I did create the certificate with CN=localhost.

推荐答案

可以通过在客户端将 ssl.endpoint.identification.algorithm 设置为空字符串来禁用服务器主机名验证.

The server host name verification may be disabled by setting ssl.endpoint.identification.algorithm to an empty string on the client.