How to make kafka plugin communicate with policy manager url over ssl?

Question

Im trying to make kafka ranger plugin communicate with the policy manager url over ssl, i have the truststore and keystore jks file but im getting PKIX path building failed, i know this error usually is visible when the files are not in the right place. I am using original ranger repository, please let me know where are we supposed to keep the files?

Kartik_Agarwal · Accepted Answer

@aleezeh Letus know if you also getting this error

unable to find valid certification path to requested target.

If yes there could be chances that kafka truststore does not have ranger admin certificate you can import the ranger admin certificate to kafka truststore.

keytool -importcert -file /tmp/ranger.cer -keystore kafka_plugin_truststore.jks

If you found that the provided solution(s) assisted you with your query, please take a moment to login and click Accept as Solution below each response that helped.

xsmehul · Answer

If its a CDP env, this article  : https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-ranger-configuring-advanced/topics/security-ranger-configure-tls-ssl.html might help with steps.

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.