SV-SSL handshake failed for Apache KAFKA component
book
Article ID: 190437
calendar_today
Updated On:
Products
CA Cloud Test MobileCA Application Test
Issue/Introduction
To configure Kafka Assets in DevTest, We don't have provision to set SSL key store after selectiong the SSl as protocol. We tried to set the keystore.jks in local. properties file also not working. getting keystore path not found. when enable HTTP SSL debug option. Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.validator.PKIXValidator.doBuild(Unknown Source) at sun.security.validator.PKIXValidator.engineValidate(Unknown Source) at sun.security.validator.Validator.validate(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source) ... 36 more Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source) at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source) at java.security.cert.CertPathBuilder.build(Unknown Source) ... 42 more.
Environment
Release : 10.4
Component : CA Service Virtualization
Resolution
Currently, we don't support SSL, SASL_SSL options for Kafka in DevTest. We support only plain text connections. This could be an enhancement and needs approval from PO/PM.