Failed to create Kafka handle: ssl.ca.location failed

[dieden9]

Hi,

We have set up Qlik Replicate and want to use Kafka as a target.
We have a secured Kafka cluster wither kerberos authentication. We have extracted certificates and placed them within the Qlik replicate installation directory. However, we are unable to connect to Kafka and getting the following error message:

SYS-E-HTTPFAIL, SYS-E-HTTPFAIL, Failed to create Kafka handle: ssl.ca.location failed: crypto\x509\by_file.c:199: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib...

SYS,GENERAL_EXCEPTION,SYS-E-HTTPFAIL, Failed to create Kafka handle: ssl.ca.location failed: crypto\x509\by_file.c:199: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib..,SYS,GENERAL_EXCEPTION,Failed to create Kafka handle: ssl.ca.location failed: crypto\x509\by_file.c:199: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib.

It looks that it has something to do with the certificates location but we have double-checked the location and the permissions and they looked fine. Any clue what could be causing those?

[SwathiPulagam]

Hi,

Please run the below tool from the replicate server and make sure everything works fine.

rdkafka_example.exe -P -t <topic> -b <brokerserver>:9092 -X security.protocol=SSL -X ssl.certificate.location=<.\...pem> -X ssl.key.location=<.\....key> -X ssl.key.password=<pwd> -X ssl.ca.location=<..\...cer>

The certificate must be a Dual Authentication for Kafka as like below. you can verify that using keytool command.

ExtendedKeyUsages [
serverAuth
clientAuth
]

Please refer to the attachment.

Thanks,

Swathi

[SwathiPulagam]

Hi,

Make sure your certificate is in X.509 format.

FYI: https://github.com/edenhill/librdkafka/issues/2606

Thanks,

Swathi