How to make kafka plugin communicate with policy manager url over ssl?

[#1]

Im trying to make kafka ranger plugin communicate with the policy manager url over ssl, i have the truststore and keystore jks file but im getting PKIX path building failed, i know this error usually is visible when the files are not in the right place. I am using original ranger repository, please let me know where are we supposed to keep the files?

[#2]

If its a CDP env, this article  : https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-ranger-configuring-advanced/topics/s... might help with steps. 

[#3 · Accepted solution]

@aleezeh Letus know if you also getting this error 

unable to find valid certification path to requested target.

If yes there could be chances that kafka truststore does not have ranger admin certificate you can import the ranger admin certificate to kafka truststore. 

keytool -importcert -file /tmp/ranger.cer -keystore kafka_plugin_truststore.jks

If you found that the provided solution(s) assisted you with your query, please take a moment to login and click Accept as Solution below each response that helped.