jawadahmadd / kafka-mutual-tls

Demonstrating securing a Kafka installation with mutual TLS

Kafka TLS example project

accompanying article

See the follwing article for an in-depth explanation and walkthrough of this repo https://medium.com/lydtech-consulting/securing-kafka-with-mutual-tls-and-acls-b235a077f3e3

Pre-requisites

1. Ensure OpenSSL and a recent version of the Java JRE are installed (Java keytool needed for some steps)
2. Create CA keypair (./certCreation/create-ca.sh)
3. Create Server private key, and issue a cert signed by the CA (./certCreation/create-server-cert.sh)
4. Create client private key, and issue cert signed by the CA (./certCreation/create-client-cert.sh)

Starting Kafka

1. docker-compose up -d to start Zookeeper and Kafka. Kafka will use the server keystore & truststore

Kafka commands

1. List topics (scripts/list-topics.sh)
2. CLI consume (scripts/consume.sh)
3. CLI produce (scripts/produce.sh)