Support Questions

Find answers, ask questions, and share your expertise

Need help with SSL config in Nifi - ConsumeKafka

avatar
New Contributor

I am using Nifi with Local setup . I am using 'consumeKafka' Processor

In configuration I am specifying

Kafka broker : Client_specified_broker ,
Security Protocol : SASL_SSL ,
SASL Mechanism : Plain ,
Username : SSL username ,
Password : SSL password ,
SSL Context Service : StandardSSLContextService ,
Topic : Topic From which data is consumed ,
Group_id : test

I dont see any keystore or truststore credentials with Confluent Kafka broker I am using . How to configure ConsumeKafka Processor and also please let me know if there are any setting to be done with Nifi so that it could read messages from SSL encrypted Kafka broker

 

2 REPLIES 2

avatar
Contributor

Hi Deepika,

 

I assume that you are using ConsumeKafka OR ConsumeKafka2.0 version NiFi processor ,when you select option in SSL Context Service as StandardSSLContextService then you have to select right arrow as indicated below image .

 

ConsumeKafka.PNG

 

Properties of StandardSSLContextService will be prompted to you and you can enter the values of the properties Keystore Filename,Keystore Password,Key Password,Truststore Filename,Truststore Type. etc. 

 

StandardSSLContextService_Properties.PNG

 

After providing the values of the SSL properties , enable the Controller Service and start running the ConsumeKafka processor.

 

ConsumeKafka2.0 processor properties

ConsumeKafka2.0.PNG

Please update if above steps expected and works.

 

Thanks

avatar
New Contributor

Even this is old thread updating .

add 

java-home/bin/keytool -genkey -alias server-alias -keyalg RSA -keypass changeit
-storepass changeit -keystore keystore.jks


java-home/bin/keytool -export -alias server-alias -storepass changeit
-file server.cer -keystore keystore.jks

This need to be configured on NiFI instance.