search

doujiang24 / lua-resty-kafka

Lua kafka client driver for the Openresty based on the cosocket API
BSD 3-Clause "New" or "Revised" License
801 stars 274 forks source link

Is there a way to authenticate with SSL certs? #99

Open alekseyp opened 3 years ago

alekseyp commented 3 years ago

Hello,

I've tried to do it by installing certs in OS, but couldn't authenticate against my Kafka with SSL auth enabled.

https://docs.confluent.io/current/kafka/authentication_ssl.html#clients

Has anyone tried to do it or client just doesn't support it yet?

doujiang24 commented 3 years ago

you can configure the trusted certificate: https://github.com/openresty/lua-nginx-module#lua_ssl_trusted_certificate

alpha2z commented 3 years ago

looks like resty-kafka plugin cant use authenticate-kafka-server hope writer answer soon.

doujiang24 commented 3 years ago

@alpha2z do you mean the client certificate authentication? yes, it's not supported yet.

nevmerzhitsky commented 3 years ago

@alpha2z do you mean the client certificate authentication? yes, it's not supported yet.

What are the plans to support SASL?

doujiang24 commented 3 years ago

We planned to implement the SASL feature, maybe ok in the next few weeks. PRs are still welcome :)

alekseyp commented 3 years ago

Would love to see SASL support!

danaspice commented 3 years ago

Just wondering is SASL has been implemented yet?

Hubbitus commented 1 year ago

Hello. Sorry, do you plan to implement SSL client authentication on kafka with certificate and key (or truststore/keystore)?