lua-resty-kafka Is there a way to authenticate with SSL certs?

Is there a way to authenticate with SSL certs?

Open alekseyp opened this issue 5 years ago • 8 comments

Hello,

I've tried to do it by installing certs in OS, but couldn't authenticate against my Kafka with SSL auth enabled.

https://docs.confluent.io/current/kafka/authentication_ssl.html#clients

Has anyone tried to do it or client just doesn't support it yet?

Aug 08 '20 19:08 alekseyp

you can configure the trusted certificate: https://github.com/openresty/lua-nginx-module#lua_ssl_trusted_certificate

Aug 11 '20 13:08 doujiang24

looks like resty-kafka plugin cant use authenticate-kafka-server hope writer answer soon.

Aug 15 '20 03:08 alpha2z

@alpha2z do you mean the client certificate authentication? yes, it's not supported yet.

Aug 15 '20 15:08 doujiang24

@alpha2z do you mean the client certificate authentication? yes, it's not supported yet.

What are the plans to support SASL?

Aug 15 '20 15:08 nevmerzhitsky

We planned to implement the SASL feature, maybe ok in the next few weeks. PRs are still welcome :)

Aug 16 '20 15:08 doujiang24

Would love to see SASL support!

Sep 01 '20 02:09 alekseyp

Just wondering is SASL has been implemented yet?

Apr 21 '21 16:04 danaspice

Hello. Sorry, do you plan to implement SSL client authentication on kafka with certificate and key (or truststore/keystore)?

Jun 01 '23 23:06 Hubbitus