https://melastmohican.github.io/tags/kafka/ Recent content in Kafka on melastmohican.github.io Hugo en-us Sat, 14 Mar 2020 21:35:50 -0700 https://melastmohican.github.io/posts/convert_kafka_jks_certificate_to_pem/ Sat, 14 Mar 2020 21:35:50 -0700 https://melastmohican.github.io/posts/convert_kafka_jks_certificate_to_pem/ <h2 id="intro"> Intro <a class="heading-link" href="#intro"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>Kafka supports encryption and authentication via SSL. However, the generated certificates are in Java KeyStore (JKS) format so if you need to use them in other language you need to convert them to X.509 format (.pem – Privacy-enhanced Electronic Mail).</p> <p>Here are the commands to extract the Certificate Authority (CA) certificate:</p> <div class="highlight"><pre tabindex="0" style="background-color:#fff;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-gdscript3" data-lang="gdscript3"><span style="display:flex;"><span>$ keytool -importkeystore -srckeystore dev.client.truststore.jks -destkeystore server.p12 -deststoretype PKCS12 </span></span><span style="display:flex;"><span>$ openssl pkcs12 -<span style="font-weight:bold">in</span> server.p12 -nokeys -out ca_cert.pem </span></span></code></pre></div><p>You can then convert your client keystore to be usable from languages supporting .pem, with similar commands:</p>