SSH CA file is required

[gwuah]

In case anyone is not able to connect to cloudkarafka due to handshake issues, see this file https://www.cloudkarafka.com/docs/faq.html

[sumeshkanayi]

hi @gwuah ,
I am hit with SSL handshake error ,

[thrd:sasl_ssl://rocket-02.srvs.cloudkafka.com:9094/bootstrap]: sasl_ssl://rocket-02.srvs.cloudkafka.com:9094/bootstrap: SSL handshake failed: Disconnected: connecting to a PLAINTEXT broker listener? (after 85ms in state CONNECT, 1 identical error(s) suppressed)

my Config is below and /etc/ssl/certs/karafka.pem has CA certificate downloaded .Any clue how i can resolve this?

config := &kafka.ConfigMap{
"metadata.broker.list": os.Getenv("CLOUDKARAFKA_BROKERS"),
"security.protocol": "SASL_SSL",
"sasl.mechanisms": "SCRAM-SHA-256",
"sasl.username": os.Getenv("CLOUDKARAFKA_USERNAME"),
"sasl.password": os.Getenv("CLOUDKARAFKA_PASSWORD"),
"group.id": os.Getenv("CLOUDKARAFKA_GROUPID"),
"default.topic.config": kafka.ConfigMap{"auto.offset.reset": "earliest"},
"ssl.ca.location": "/etc/ssl/certs/karafka.pem",

	//"debug":                           "generic,broker,security",
}

[gwuah]

@sumeshkanayi
Have you tried this? 👆🏾

so your config ends up looking like this.

func getProducerConfig(config *core.Config) *kafka.ConfigMap {
    return &kafka.ConfigMap{
			"metadata.broker.list": config.CLOUDKARAFKA_BROKERS,
			"security.protocol":    "SASL_SSL",
			"sasl.mechanisms":      "SCRAM-SHA-256",
			"sasl.username":        config.CLOUDKARAFKA_USERNAME,
			"sasl.password":        config.CLOUDKARAFKA_PASSWORD,
			"ssl.ca.location":      "./cloudkarafka.ca",
		}
}

func getConsumerConfig(config *core.Config) *kafka.ConfigMap {
		return &kafka.ConfigMap{
			"metadata.broker.list": config.CLOUDKARAFKA_BROKERS,
			"security.protocol":    "SASL_SSL",
			"sasl.mechanisms":      "SCRAM-SHA-256",
			"sasl.username":        config.CLOUDKARAFKA_USERNAME,
			"sasl.password":        config.CLOUDKARAFKA_PASSWORD,
			"group.id":             config.KAFKA_GROUP_ID,
			"default.topic.config": kafka.ConfigMap{"auto.offset.reset": "earliest"},
			"auto.offset.reset":    "earliest",
			"ssl.ca.location":      "./cloudkarafka.ca",
		}
}

NB: The first file is outdated. So you have to download the second one cloudkarafka_2020_12.ca

[sumeshkanayi]

Thanks @gwuah i tried that after seeing your comments but didnt make any difference .Trying upgrading open ssl now, can you tell me what openssl version are you using in your setup?