question Need help with SSL config in Nifi - ConsumeKafka in Support Questions

Need help with SSL config in Nifi - ConsumeKafka

Deepika_Gaddam — Tue, 13 Jul 2021 07:53:10 GMT

I am using Nifi with Local setup . I am using 'consumeKafka' Processor

In configuration I am specifying

Kafka broker : Client_specified_broker ,
Security Protocol : SASL_SSL ,
SASL Mechanism : Plain ,
Username : SSL username ,
Password : SSL password ,
SSL Context Service : StandardSSLContextService ,
Topic : Topic From which data is consumed ,
Group_id : test

I dont see any keystore or truststore credentials with Confluent Kafka broker I am using . How to configure ConsumeKafka Processor and also please let me know if there are any setting to be done with Nifi so that it could read messages from SSL encrypted Kafka broker

Re: Need help with SSL config in Nifi - ConsumeKafka

adhishankarit — Tue, 13 Jul 2021 13:52:41 GMT

Hi Deepika,

I assume that you are using ConsumeKafka OR ConsumeKafka2.0 version NiFi processor ,when you select option in SSL Context Service as StandardSSLContextService then you have to select right arrow as indicated below image .

Properties of StandardSSLContextService will be prompted to you and you can enter the values of the properties Keystore Filename,Keystore Password,Key Password,Truststore Filename,Truststore Type. etc.

After providing the values of the SSL properties , enable the Controller Service and start running the ConsumeKafka processor.

ConsumeKafka2.0 processor properties

Please update if above steps expected and works.

Thanks

Re: Need help with SSL config in Nifi - ConsumeKafka

Ranveer — Tue, 05 Apr 2022 07:44:13 GMT

Even this is old thread updating .

add

java-home/bin/keytool -genkey -alias server-alias -keyalg RSA -keypass changeit
-storepass changeit -keystore keystore.jks

java-home/bin/keytool -export -alias server-alias -storepass changeit
-file server.cer -keystore keystore.jks

This need to be configured on NiFI instance.