search cancel

SV-SSL handshake failed for Apache KAFKA component

book

Article ID: 190437

calendar_today

Updated On:

Products

CA Cloud Test Mobile CA Application Test

Issue/Introduction

To configure  Kafka Assets in DevTest, We don't have provision to set SSL key store after selectiong the SSl as protocol. We tried to set the keystore.jks in local. properties file also not working. getting keystore path not found.
 when enable HTTP SSL debug option.
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
 at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
 at sun.security.validator.Validator.validate(Unknown Source)
 at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
 at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
 at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
 ... 36 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 at sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)
 at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
 at java.security.cert.CertPathBuilder.build(Unknown Source)
 ... 42 more.

Environment

Release : 10.4

Component : CA Service Virtualization

Resolution

Currently, we don't support SSL, SASL_SSL options for Kafka in DevTest. We support only plain text connections. This could be an enhancement and needs approval from PO/PM.