Convert Kafka JKS certificate to PEM

Sat, 14 Mar 2020 21:35:50 -0700

Intro Link to heading

Kafka supports encryption and authentication via SSL. However, the generated certificates are in Java KeyStore (JKS) format so if you need to use them in other language you need to convert them to X.509 format (.pem – Privacy-enhanced Electronic Mail).

Here are the commands to extract the Certificate Authority (CA) certificate:

$ keytool -importkeystore -srckeystore dev.client.truststore.jks -destkeystore server.p12 -deststoretype PKCS12
$ openssl pkcs12 -in server.p12 -nokeys -out ca_cert.pem

You can then convert your client keystore to be usable from languages supporting .pem, with similar commands:

What new language should I learn as Java Developer

Fri, 13 Mar 2020 05:38:17 -0800

If you are a Java programmer and are thinking of learning some more programming languages to expand your knowledge and skills, but not sure which programming languages to choose, then you are not alone. Last year there were multiple talks in our organization about migrating away from Java because o potential problems with new Oracle licensing. It is still unclear how Oracle will be auditing for Java licensing and what it will mean should an organization not be compliant. We switched to a different OpenJDK vendor and we are using Amazon Correto now. We also migrated all ouf our microservices from Java 8 to 11 for a different reason which I might mention later.

Migration on melastmohican.github.io

Convert Kafka JKS certificate to PEM

Intro Link to heading

What new language should I learn as Java Developer