I would suggest checking the keystores you're using in the nifi consumer with a simple producer/consumer in the kafka host itself, for example:
Create a file called client.properties and add the SSL details, example below:
https://docs.cloudera.com/HDPDocuments/HDP3/HDP-3.1.0/configuring-wire-encryption/content/configurin...
Then run the consumer and see if the issue is replicated, if yes, you can enable debugging for the client to get more details about the exception.
I hope that helps to find the root cause.