Error Return code 21: SSL encryption between filebeat 5.2 and kafka 1.0 (self signed)

It would be interesting to see what Wireshark or tcpdump says about the handshake. Maybe you can do a capture like tcpdump -i eth0 -w handshake.pcap tcp port 9093. Then take a look at the pcap in Wireshark.