Filebeat to Kafka SSL (with jks)

[nisham (Muhammed Nisham)]

Hello,

I have setup a Kafka server with SSL enabled using the jks file. I'm able to read and write from the Kafka topic using Logstash by providing the JKS files in the logstash config file.

I need to write data from Filebeat to Kafka over the SSL using jks (but in documentation there is no option for jks). I tried with converting jks to cert.pem and key.pem but its not working.

Could someone help me on this ? Thanks in advance.

[YvorL]

Hi,

If you simply need to authenticate the Kafka nodes, you'll only need (in filebeat.yml):
ssl.certificate_authorities: /path/to/ca/cert/ca.cert

In case, it's a 2-way auth, you'll need to add these too:

ssl.certificate: /path/to/host/cert/cert.pem
ssl.key: /path/to/host/key/cert.key

Filebeat isn't JAVA dependent (it was written in Go if I'm not mistaken) so you'll need to convert the JKS to PKI type of cert and key.
I didn't use 2-way auth for FB, let me know if it worked!

I used this and this doc for the above.